NavEncrypt / Use UUID in ztab?

[#1]

Hi, does anyone know if I can use the device UUID instead of the device name (/dev/xxx) in the /etc/navencrypt/ztab file as I do in /etc/fstab?

Hi, here is the output of my /etc/navencrypt/ztab on one of my Kafka Brokers:

# <target mount-dir> <source device> <type> <options>
/data/kafka/01 /dev/sdb luks key=keytrustee
/data/kafka/03 /dev/sdd luks key=keytrustee
/data/kafka/04 /dev/sde luks key=keytrustee
/data/kafka/05 /dev/sdf luks key=keytrustee
/data/kafka/06 /dev/sdg luks key=keytrustee
/data/kafka/02 /dev/sdy luks key=keytrustee

The reason I ask is, when a drive fails and is replaced without a reboot, the new device name may change from /dev/sdc to /dev/sdy for example. Upon reboot, I am concerned the device names will be reordered and the drive not mount properly.

If you notice in the ztab output above, /dev/sdc is skipped (it failed) and I replaced the drive which registered as /dev/sdy. If I can reference the UUID, it would be a non-issue.  Make sense?

Michael

[#2 · Accepted solution]

Hi,

support for device UUIDs with navencrypt was introduced in version 3.13.0:

https://www.cloudera.com/documentation/enterprise/release-notes/topics/rg_navigator_encrypt_new_feat...

Please check the relevant documentation on how to use it here:

https://www.cloudera.com/documentation/enterprise/latest/topics/navigator_encrypt_prepare.html#conce...

regards,

Gabor Zele
Customer Operations Engineer