From: Stephen Frost <sfrost@snowman.net>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Bruce Momjian <bruce@momjian.us>
Cc: Ants Aasma <ants.aasma@eesti.ee>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: WIP: Data at rest encryption
Date: Tue, 13 Jun 2017 18:11:04 -0400
Message-ID: <20170613221104.GT3151@tamriel.snowman.net> (raw)
In-Reply-To: <a2fa2930-5334-c926-01ee-4a01c605b7a4@2ndquadrant.com>
References: <20170613170132.GH3151@tamriel.snowman.net>
<20170613171356.GG13873@momjian.us>
<20170613172459.GL3151@tamriel.snowman.net>
<20170613174329.GK13873@momjian.us>
<20170613182339.GP3151@tamriel.snowman.net>
<20170613182910.GN13873@momjian.us>
<20170613183858.GR3151@tamriel.snowman.net>
<20170613185622.GO13873@momjian.us>
<20170613192011.GS3151@tamriel.snowman.net>
<a2fa2930-5334-c926-01ee-4a01c605b7a4@2ndquadrant.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
Peter,
* Peter Eisentraut (peter.eisentraut@2ndquadrant.com) wrote:
> On 6/13/17 15:20, Stephen Frost wrote:
> > No, the benefit is that the database administrator can configure it and
> > set it up and not have to get an OS-level administrator involved. There
> > may also be other reasons why filesystem-level encryption is difficult
> > to set up or use in a certain environment, but this wouldn't depend on
> > anything OS-related and therefore could be done.
>
> Let's see a proposal in those terms then. How easy can you make it,
> compared to existing OS-level solutions, and will that justify the
> maintenance overhead?
From the original post on this thread, which included a WIP patch:
----------------------------------
Usage
=====
Set up database like so:
(read -sp "Postgres passphrase: " PGENCRYPTIONKEY; echo;
export PGENCRYPTIONKEY
initdb -k -K pgcrypto $PGDATA )
Start PostgreSQL:
(read -sp "Postgres passphrase: " PGENCRYPTIONKEY; echo;
export PGENCRYPTIONKEY
postgres $PGDATA )
----------------------------------
That certainly seems very straight-forward to me, though I expect that
packagers would probably improve upon it further.
> Considering how ubiquitous file-system encryption is, I have my doubts
> that the trade-offs will come out right, but let's see.
There's definitely environments out there where DBAs aren't able to have
root privileges and that limits what they're able to do. I'm not really
sure how to objectively weigh "you don't need to be root to encrypt the
database" vs. maintenance overhead of this feature. Subjectively, for
my 2c anyway, it seems well worth it, but that's naturally subjective.
:)
Thanks!
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: sfrost@snowman.net, peter.eisentraut@2ndquadrant.com, bruce@momjian.us, ants.aasma@eesti.ee, robertmhaas@gmail.com
Subject: Re: WIP: Data at rest encryption
In-Reply-To: <20170613221104.GT3151@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox