ZFS is a problem... copy-on-write... you can't even scrub the data from the file-system layer...
On Thu, Sep 30, 2021 at 11:59 PM Prentice Bisbal via Beowulf < beowulf@beowulf.org> wrote: > Don't forget about tape backups. Was any of the data covered by the DUA > backed up to tape? How do you deal with that? > > Prentice > > On 9/29/21 10:49 AM, Paul Edmon via Beowulf wrote: > > Yeah, that's what we were surmising. But paranoia and compliance being > what it is we were curious what others were doing. > > -Paul Edmon- > On 9/29/2021 10:32 AM, Renfro, Michael wrote: > > I have to wonder if the intent of the DUA is to keep physical media from > winding up in the wrong hands. If so, if the servers hosting the parallel > filesystem (or a normal single file server) is physically secured in a data > center, and the drives are destroyed on decommissioning, that might satisfy > the requirements. > > > > *From: *Beowulf <beowulf-boun...@beowulf.org> > <beowulf-boun...@beowulf.org> on behalf of Paul Edmon via Beowulf > <beowulf@beowulf.org> <beowulf@beowulf.org> > *Date: *Wednesday, September 29, 2021 at 9:15 AM > *To: *Scott Atchley <e.scott.atch...@gmail.com> > <e.scott.atch...@gmail.com> > *Cc: *Beowulf Mailing List <beowulf@beowulf.org> <beowulf@beowulf.org> > *Subject: *Re: [Beowulf] Data Destruction > > *External Email Warning* > > *This email originated from outside the university. Please use caution > when opening attachments, clicking links, or responding to requests.* > ------------------------------ > > The former. We are curious how to selectively delete data from a parallel > filesystem. For example we commonly use Lustre, ceph, and Isilon in our > environment. That said if other types allow for easier destruction of > selective data we would be interested in hearing about it. > > -Paul Edmon- > > On 9/29/2021 10:06 AM, Scott Atchley wrote: > > Are you asking about selectively deleting data from a parallel file system > (PFS) or destroying drives after removal from the system either due to > failure or system decommissioning? > > > > For the latter, DOE does not allow us to send any non-volatile media > offsite once it has had user data on it. When we are done with drives, we > have a very big shredder. > > > > On Wed, Sep 29, 2021 at 9:59 AM Paul Edmon via Beowulf < > beowulf@beowulf.org> wrote: > > Occassionally we get DUA (Data Use Agreement) requests for sensitive > data that require data destruction (e.g. NIST 800-88). We've been > struggling with how to handle this in an era of distributed filesystems > and disks. We were curious how other people handle requests like this? > What types of filesystems to people generally use for this and how do > people ensure destruction? Do these types of DUA's preclude certain > storage technologies from consideration or are there creative ways to > comply using more common scalable filesystems? > > Thanks in advance for the info. > > -Paul Edmon- > > _______________________________________________ > Beowulf mailing list, Beowulf@beowulf.org sponsored by Penguin Computing > To change your subscription (digest mode or unsubscribe) visit > https://beowulf.org/cgi-bin/mailman/listinfo/beowulf > <https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbeowulf.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fbeowulf&data=04%7C01%7CRenfro%40tntech.edu%7Ce4b070f6b37645adf15808d983539bba%7C66fecaf83dc04d2cb8b8eff0ddea46f0%7C1%7C0%7C637685217402282601%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6Nz8oMRsE%2BwUZuaarhTWXAZ8ThB7zWUHJz%2BmVCo2bp4%3D&reserved=0> > > > _______________________________________________ > Beowulf mailing list, Beowulf@beowulf.org sponsored by Penguin Computing > To change your subscription (digest mode or unsubscribe) visit > https://beowulf.org/cgi-bin/mailman/listinfo/beowulf > > > _______________________________________________ > Beowulf mailing list, Beowulf@beowulf.org sponsored by Penguin Computing > To change your subscription (digest mode or unsubscribe) visit > https://beowulf.org/cgi-bin/mailman/listinfo/beowulf > > _______________________________________________ > Beowulf mailing list, Beowulf@beowulf.org sponsored by Penguin Computing > To change your subscription (digest mode or unsubscribe) visit > https://beowulf.org/cgi-bin/mailman/listinfo/beowulf > -- Dr Stuart Midgley sdm...@gmail.com
_______________________________________________ Beowulf mailing list, Beowulf@beowulf.org sponsored by Penguin Computing To change your subscription (digest mode or unsubscribe) visit https://beowulf.org/cgi-bin/mailman/listinfo/beowulf
