Skip to content

Encryption at Rest (EAR) using e4crypt breaks after update to 2605.8.0 #286

@ryanm101

Description

@ryanm101

Updating from 2512.5.0 to 2605.8.0 breaks encryption at rest using e4crypt.

e4crypt get_policy /var/lib/kubelet/plugins/kubernetes.io/vsphere-volume/mounts/\[MYDatastore\]\ kubevols/kubernetes-dynamic-pvc-axx32d6b-xxx-xxxx-xxxx-0xxx45dc2.vmdk/encrypted
returns
Error getting policy for /var/lib/kubelet/plugins/kubernetes.io/vsphere-volume/mounts/\[MYDatastore\]\ kubevols/kubernetes-dynamic-pvc-axx32d6b-xxx-xxxx-xxxx-0xxx45dc2.vmdk/encrypted: Operation not supported

I'll provide more information hopefully over the next week as i narrow down what exactly happened and if we can go into 26XX at all. This is a placeholder so I dont lose the info over the weekend and incase anyone else has encountered the issue.

Rolling back the update fixes the issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    good first issueGet started with Flatcar contribution with this issue.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions