21.12. Binding a Stratis pool to NBDE

Prerequisites

• Stratis v2.3.0 or later is installed and the stratisd service is running. For more information, see Installing Stratis.
• An encrypted Stratis pool is created, and you have the key description of the key that was used for the encryption. For more information, see Creating an encrypted Stratis pool using a key in the kernel keyring.
• You can connect to the Tang server. For more information, see Deploying a Tang server with SELinux in enforcing mode.

Procedure

• Bind an encrypted Stratis pool to NBDE:

  # stratis pool bind nbde --trust-url my-pool tang-server

  my-pool

  Specifies the name of the encrypted Stratis pool.

  tang-server

  Specifies the IP address or URL of the Tang server.