Skip to content

EAR: fix Redwood encryption system key space prefix #8698

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
sfc-gh-yiwu merged 3 commits into from
Nov 8, 2022
Merged

EAR: fix Redwood encryption system key space prefix #8698

sfc-gh-yiwu merged 3 commits into from
Nov 8, 2022

Conversation

@sfc-gh-yiwu
Copy link
Collaborator

@sfc-gh-yiwu sfc-gh-yiwu commented Nov 3, 2022

We should encrypt the full \xff key space with system key, which is the database-wide system key space. "\xff\xff" is the subspace in it used by storage to store its durable state locally.

Code-Reviewer Section

The general pull request guidelines can be found here.

Please check each of the following things and check all boxes before accepting a PR.

  • The PR has a description, explaining both the problem and the solution.
  • The description mentions which forms of testing were done and the testing seems reasonable.
  • Every function/class/actor that was touched is reasonably well documented.

For Release-Branches

If this PR is made against a release-branch, please also check the following:

  • This change/bugfix is a cherry-pick from the next younger branch (younger release-branch or main if this is the youngest branch)
  • There is a good reason why this PR needs to go into a release branch and this reason is documented (either in the description above or in a linked GitHub issue)

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 4, 2022

Result of foundationdb-pr-clang-ide on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 4, 2022

Result of foundationdb-pr on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 4, 2022

Result of foundationdb-pr-clang on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 4, 2022

Result of foundationdb-pr-cluster-tests on Linux CentOS 7

  • Commit ID: b12b8fa
  • Duration 2:06:49
  • Result: ❌ FAILED
  • Error: Error while executing command: if $(grep -q -- "--- FAIL:" ${CODEBUILD_SRC_DIR}/fdb-kubernetes-tests/logs/*.log); then echo "TESTS FAILED SEE THESE LOGS:"; echo ; grep -l -- "--- FAIL:" ${CODEBUILD_SRC_DIR}/fdb-kubernetes-tests/logs/*.log; exit 1; fi. Reason: exit status 1
  • Build Logs (available for 30 days)
  • Build Artifact (available for 30 days)

@fdb-windows-ci
Copy link
Collaborator

fdb-windows-ci commented Nov 4, 2022

Doxense CI Report for Windows 10

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 7, 2022

Result of foundationdb-pr-clang-ide on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 7, 2022

Result of foundationdb-pr-macos-m1 on macOS BigSur 11.5.2

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 7, 2022

Result of foundationdb-pr-clang on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 7, 2022

Result of foundationdb-pr-macos on macOS Monterey 12.x

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 7, 2022

Result of foundationdb-pr on Linux CentOS 7

@fdb-windows-ci
Copy link
Collaborator

fdb-windows-ci commented Nov 7, 2022

Doxense CI Report for Windows 10

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 7, 2022

Result of foundationdb-pr-cluster-tests on Linux CentOS 7

  • Commit ID: b12b8fa
  • Duration 2:08:13
  • Result: ❌ FAILED
  • Error: Error while executing command: if $(grep -q -- "--- FAIL:" ${CODEBUILD_SRC_DIR}/fdb-kubernetes-tests/logs/*.log); then echo "TESTS FAILED SEE THESE LOGS:"; echo ; grep -l -- "--- FAIL:" ${CODEBUILD_SRC_DIR}/fdb-kubernetes-tests/logs/*.log; exit 1; fi. Reason: exit status 1
  • Build Logs (available for 30 days)
  • Build Artifact (available for 30 days)

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 8, 2022

Result of foundationdb-pr-clang-ide on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 8, 2022

Result of foundationdb-pr-clang on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 8, 2022

Result of foundationdb-pr on Linux CentOS 7

@foundationdb-ci
Copy link
Contributor

foundationdb-ci commented Nov 8, 2022

Result of foundationdb-pr-cluster-tests on Linux CentOS 7

  • Commit ID: 27f8fa6
  • Duration 2:04:14
  • Result: ❌ FAILED
  • Error: Error while executing command: if $(grep -q -- "--- FAIL:" ${CODEBUILD_SRC_DIR}/fdb-kubernetes-tests/logs/*.log); then echo "TESTS FAILED SEE THESE LOGS:"; echo ; grep -l -- "--- FAIL:" ${CODEBUILD_SRC_DIR}/fdb-kubernetes-tests/logs/*.log; exit 1; fi. Reason: exit status 1
  • Build Logs (available for 30 days)
  • Build Artifact (available for 30 days)

@fdb-windows-ci
Copy link
Collaborator

fdb-windows-ci commented Nov 8, 2022

Doxense CI Report for Windows 10

@sfc-gh-yiwu sfc-gh-yiwu merged commit 705ad9c into apple:main Nov 8, 2022
@sfc-gh-yiwu sfc-gh-yiwu deleted the encrypt_system branch November 8, 2022 17:25
sfc-gh-nwijetunga added a commit to sfc-gh-nwijetunga/foundationdb that referenced this pull request Nov 9, 2022
@sfc-gh-nwijetunga
Merge branch 'main' into nim/fix-bulk-load
7624d3f 
* main:
  Blob single part upload (apple#8703)
  Addressed review comments
  Extend Transaction Window during Restore in Simulation (apple#8729)
  Increase default GLOBAL_TAG_THROTTLING_FOLDING_TIME
  EAR: fix Redwood encryption system key space prefix (apple#8698)
  Rocksdb stats level knob. (apple#8711)
  Add CLI Argument to Override Snapshot Backup Encryption (apple#8661)
  Disable taking the ss read lock due to a 5% read perf regression in 100% cached read, CPU-bound scenario.
  Fix go usage in mock_kms cmake commands.
  make trackExcludedServers PRIORITY_SYSTEM_IMMEDIATE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sfc-gh-nwijetunga sfc-gh-nwijetunga sfc-gh-nwijetunga approved these changes

@sfc-gh-satherton sfc-gh-satherton Awaiting requested review from sfc-gh-satherton

@sfc-gh-ahusain sfc-gh-ahusain Awaiting requested review from sfc-gh-ahusain

Assignees

@sfc-gh-ahusain sfc-gh-ahusain

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@sfc-gh-yiwu @foundationdb-ci @fdb-windows-ci @sfc-gh-ahusain @sfc-gh-nwijetunga