Re: Reg: Filesystem level encryption support for postgreSQL

From: Arni <Arni(dot)Kromic(at)Bios-ICT(dot)hr>
To: pgsql-admin(at)lists(dot)postgresql(dot)org
Subject: Re: Reg: Filesystem level encryption support for postgreSQL
Date: 2019-09-13 08:31:22
Message-ID: 3bf5d5e4-a867-87e0-fb9e-4d36de713f45@Bios-ICT.hr
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Indeed. When I read the question I also thought of something like
VeraCrypt (ex TrueCrypt). Any solution specific for postgres would NOT
be at "filesystem level".

Regards,
Arni

On 13/09/2019 00.22, Ron wrote:
> But you said "i need to implement *Filesystem* level encryption". 
> That's not specific to PostgreSQL.
>
> On 9/12/19 4:57 PM, pradeep pandey wrote:
>> Thanks but i am looking for solution which is more specific to
>> postgreSQL in line with TDE and HSM 
>>
>> ------------------------------------------------------------------------
>> *From:* jwiencek3 <jwiencek3(at)comcast(dot)net>
>> *Sent:* Thursday, September 12, 2019 9:42 PM
>> *To:* pradeep pandey <pandeyp(at)hotmail(dot)com>;
>> pgsql-admin(at)lists(dot)postgresql(dot)org <pgsql-admin(at)lists(dot)postgresql(dot)org>
>> *Subject:* Re: Reg: Filesystem level encryption support for postgreSQL
>>  
>> I'm working on an environment that is using Hytrust.   Other than
>> taking a long time encrypt the disk there have been no issues at all.
>>
>> FYI encryption of a 1Tb mount takes approx. 12 hours.  We had to
>> decrypt at one point and that effort was about the same as an encrypt. 
>>
>> Storage admins owned this not the DBA.
>>
>>
>> Sent via the Samsung Galaxy S9+, an AT&T 5G Evolution capable smartphone
>>
>> -------- Original message --------
>> From: pradeep pandey <pandeyp(at)hotmail(dot)com>
>> Date: 9/12/19 3:59 PM (GMT-06:00)
>> To: pgsql-admin(at)lists(dot)postgresql(dot)org
>> Subject: Reg: Filesystem level encryption support for postgreSQL
>>
>> Hi folks, 
>>
>> i am new to postgreSQL and i need to implement Filesystem level
>> encryption  and we use EKM for encryption keys
>> i am seeking you folks help to know 2 things here 
>>
>> * if i implment EKM which is third party encryption is that
>> supported by postgreSQL 
>> * what is the best practice and supported method of implmenting the
>> filesytem level of encyption/protection in postgreSQL 
>> * i searched google but did not find much info 
>> * any pointer or link to read would alos help 
>>
>> Thanks in advance folks 
>> Pradeep
>>  
>>
>
> --
> Angular momentum makes the world go 'round.

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message sunil kumar 2019-09-13 17:03:38 Re: Bug Report - SAVE data button disabled
Previous Message Damian Jolly 2019-09-13 00:52:06 Bug Report - SAVE data button disabled