<div dir="ltr">ZFS is a problem... copy-on-write... you can't even scrub the data from the file-system layer...</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Sep 30, 2021 at 11:59 PM Prentice Bisbal via Beowulf <<a href="mailto:beowulf@beowulf.org">beowulf@beowulf.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<div>
Don't forget about tape backups. Was any of the data covered by the
DUA backed up to tape? How do you deal with that? <br>
<pre cols="72">Prentice</pre>
<div>On 9/29/21 10:49 AM, Paul Edmon via
Beowulf wrote:<br>
</div>
<blockquote type="cite">
<p>Yeah, that's what we were surmising. But paranoia and
compliance being what it is we were curious what others were
doing.</p>
<p>-Paul Edmon-<br>
</p>
<div>On 9/29/2021 10:32 AM, Renfro,
Michael wrote:<br>
</div>
<blockquote type="cite">
<div>
<p class="MsoNormal">I have to wonder if the intent of the DUA
is to keep physical media from winding up in the wrong
hands. If so, if the servers hosting the parallel filesystem
(or a normal single file server) is physically secured in a
data center, and the drives are destroyed on
decommissioning, that might satisfy the requirements.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border-style:solid none none;border-top-width:1pt;border-top-color:rgb(181,196,223);padding:3pt 0in 0in">
<p class="MsoNormal" style="margin-bottom:12pt"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">Beowulf <a href="mailto:beowulf-bounces@beowulf.org" target="_blank"><beowulf-bounces@beowulf.org></a>
on behalf of Paul Edmon via Beowulf <a href="mailto:beowulf@beowulf.org" target="_blank"><beowulf@beowulf.org></a><br>
<b>Date: </b>Wednesday, September 29, 2021 at 9:15 AM<br>
<b>To: </b>Scott Atchley <a href="mailto:e.scott.atchley@gmail.com" target="_blank"><e.scott.atchley@gmail.com></a><br>
<b>Cc: </b>Beowulf Mailing List <a href="mailto:beowulf@beowulf.org" target="_blank"><beowulf@beowulf.org></a><br>
<b>Subject: </b>Re: [Beowulf] Data Destruction<u></u><u></u></span></p>
</div>
<p style="margin:0in;text-align:center;background-color:white" align="center"><b><span style="font-size:12pt;color:red;background-color:white">External
Email Warning</span></b><u></u><u></u></p>
<p style="margin-right:12pt;margin-bottom:0in;margin-left:12pt;text-align:center;background-color:white" align="center"> <b><span style="font-size:12pt;color:red">This
email originated from outside the university. Please use
caution when opening attachments, clicking links, or
responding to requests.</span></b><u></u><u></u></p>
<div class="MsoNormal" style="text-align:center" align="center">
<hr width="100%" size="0" align="center"> </div>
<div>
<p>The former. We are curious how to selectively delete
data from a parallel filesystem. For example we commonly
use Lustre, ceph, and Isilon in our environment. That
said if other types allow for easier destruction of
selective data we would be interested in hearing about it.<u></u><u></u></p>
<p>-Paul Edmon-<u></u><u></u></p>
<div>
<p class="MsoNormal">On 9/29/2021 10:06 AM, Scott Atchley
wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<p class="MsoNormal">Are you asking about selectively
deleting data from a parallel file system (PFS) or
destroying drives after removal from the system either
due to failure or system decommissioning? <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">For the latter, DOE does not
allow us to send any non-volatile media offsite once
it has had user data on it. When we are done
with drives, we have a very big shredder.<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Wed, Sep 29, 2021 at 9:59 AM
Paul Edmon via Beowulf <<a href="mailto:beowulf@beowulf.org" target="_blank">beowulf@beowulf.org</a>>
wrote:<u></u><u></u></p>
</div>
<blockquote style="border-style:none none none solid;border-left-width:1pt;border-left-color:rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">Occassionally we get DUA (Data
Use Agreement) requests for sensitive <br>
data that require data destruction (e.g. NIST
800-88). We've been <br>
struggling with how to handle this in an era of
distributed filesystems <br>
and disks. We were curious how other people handle
requests like this? <br>
What types of filesystems to people generally use
for this and how do <br>
people ensure destruction? Do these types of DUA's
preclude certain <br>
storage technologies from consideration or are there
creative ways to <br>
comply using more common scalable filesystems?<br>
<br>
Thanks in advance for the info.<br>
<br>
-Paul Edmon-<br>
<br>
_______________________________________________<br>
Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org" target="_blank">Beowulf@beowulf.org</a>
sponsored by Penguin Computing<br>
To change your subscription (digest mode or
unsubscribe) visit <a href="https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbeowulf.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fbeowulf&data=04%7C01%7CRenfro%40tntech.edu%7Ce4b070f6b37645adf15808d983539bba%7C66fecaf83dc04d2cb8b8eff0ddea46f0%7C1%7C0%7C637685217402282601%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6Nz8oMRsE%2BwUZuaarhTWXAZ8ThB7zWUHJz%2BmVCo2bp4%3D&reserved=0" target="_blank">
https://beowulf.org/cgi-bin/mailman/listinfo/beowulf</a><u></u><u></u></p>
</blockquote>
</div>
</blockquote>
</div>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org" target="_blank">Beowulf@beowulf.org</a> sponsored by Penguin Computing
To change your subscription (digest mode or unsubscribe) visit <a href="https://beowulf.org/cgi-bin/mailman/listinfo/beowulf" target="_blank">https://beowulf.org/cgi-bin/mailman/listinfo/beowulf</a>
</pre>
</blockquote>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org" target="_blank">Beowulf@beowulf.org</a> sponsored by Penguin Computing
To change your subscription (digest mode or unsubscribe) visit <a href="https://beowulf.org/cgi-bin/mailman/listinfo/beowulf" target="_blank">https://beowulf.org/cgi-bin/mailman/listinfo/beowulf</a>
</pre>
</blockquote>
</div>
_______________________________________________<br>
Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org" target="_blank">Beowulf@beowulf.org</a> sponsored by Penguin Computing<br>
To change your subscription (digest mode or unsubscribe) visit <a href="https://beowulf.org/cgi-bin/mailman/listinfo/beowulf" rel="noreferrer" target="_blank">https://beowulf.org/cgi-bin/mailman/listinfo/beowulf</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Dr Stuart Midgley<br><a href="mailto:sdm900@gmail.com" target="_blank">sdm900@gmail.com</a></div></div>