21.9. Creating an encrypted Stratis pool by using the web console

To secure your data, you can use the web console to create an encrypted Stratis pool from one or more block devices.

When creating an encrypted Stratis pool from one or more block devices, note the following:

Each block device is encrypted using the cryptsetup library and implements the LUKS2 format.
Each Stratis pool can either have a unique key or share the same key with other pools. These keys are stored in the kernel keyring.
The block devices that comprise a Stratis pool must be either all encrypted or all unencrypted. It is not possible to have both encrypted and unencrypted block devices in the same Stratis pool.
Block devices added to the data tier of an encrypted Stratis pool are automatically encrypted.

Prerequisites

You have installed the RHEL 10 web console.
For instructions, see Installing and enabling the web console.
Stratis v2.1.0 or later is installed and the the stratisd service is running.
The block device on which you are creating a Stratis pool is not in use, unmounted, and is at least 1 GB in space.

Procedure

Log in to the RHEL 10 web console.
Click Storage.
In the Storage table, click the menu button and select Create Stratis pool.
In the Name field, enter a name for the Stratis pool.
Select the Block devices from which you want to create the Stratis pool.
Select the type of encryption, you can use a passphrase, a Tang keyserver, or both:
- Passphrase:
  1. Enter a passphrase.
  2. Confirm the passphrase.
- Tang keyserver:
  1. Enter the keyserver address. For more information, see Deploying a Tang server with SELinux in enforcing mode.
Optional: If you want to specify the maximum size for each file system that is created in pool, select Manage filesystem sizes.
Click Create.

Verification

Go to the Storage section and verify that you can see the new Stratis pool in the Devices table.