[Beowulf] [External] Re: Data Destruction

[Stu Midgley]

ZFS is a problem... copy-on-write... you can't even scrub the data from the
file-system layer...

On Thu, Sep 30, 2021 at 11:59 PM Prentice Bisbal via Beowulf <
beowulf at beowulf.org> wrote:

> Don't forget about tape backups. Was any of the data covered by the DUA
> backed up to tape? How do you deal with that?
>
> Prentice
>
> On 9/29/21 10:49 AM, Paul Edmon via Beowulf wrote:
>
> Yeah, that's what we were surmising.  But paranoia and compliance being
> what it is we were curious what others were doing.
>
> -Paul Edmon-
> On 9/29/2021 10:32 AM, Renfro, Michael wrote:
>
> I have to wonder if the intent of the DUA is to keep physical media from
> winding up in the wrong hands. If so, if the servers hosting the parallel
> filesystem (or a normal single file server) is physically secured in a data
> center, and the drives are destroyed on decommissioning, that might satisfy
> the requirements.
>
>
>
> *From: *Beowulf <beowulf-bounces at beowulf.org>
> <beowulf-bounces at beowulf.org> on behalf of Paul Edmon via Beowulf
> <beowulf at beowulf.org> <beowulf at beowulf.org>
> *Date: *Wednesday, September 29, 2021 at 9:15 AM
> *To: *Scott Atchley <e.scott.atchley at gmail.com>
> <e.scott.atchley at gmail.com>
> *Cc: *Beowulf Mailing List <beowulf at beowulf.org> <beowulf at beowulf.org>
> *Subject: *Re: [Beowulf] Data Destruction
>
> *External Email Warning*
>
> *This email originated from outside the university. Please use caution
> when opening attachments, clicking links, or responding to requests.*
> ------------------------------
>
> The former.  We are curious how to selectively delete data from a parallel
> filesystem.  For example we commonly use Lustre, ceph, and Isilon in our
> environment.  That said if other types allow for easier destruction of
> selective data we would be interested in hearing about it.
>
> -Paul Edmon-
>
> On 9/29/2021 10:06 AM, Scott Atchley wrote:
>
> Are you asking about selectively deleting data from a parallel file system
> (PFS) or destroying drives after removal from the system either due to
> failure or system decommissioning?
>
>
>
> For the latter, DOE does not allow us to send any non-volatile media
> offsite once it has had user data on it. When we are done with drives, we
> have a very big shredder.
>
>
>
> On Wed, Sep 29, 2021 at 9:59 AM Paul Edmon via Beowulf <
> beowulf at beowulf.org> wrote:
>
> Occassionally we get DUA (Data Use Agreement) requests for sensitive
> data that require data destruction (e.g. NIST 800-88). We've been
> struggling with how to handle this in an era of distributed filesystems
> and disks.  We were curious how other people handle requests like this?
> What types of filesystems to people generally use for this and how do
> people ensure destruction?  Do these types of DUA's preclude certain
> storage technologies from consideration or are there creative ways to
> comply using more common scalable filesystems?
>
> Thanks in advance for the info.
>
> -Paul Edmon-
>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit
> https://beowulf.org/cgi-bin/mailman/listinfo/beowulf
> <https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbeowulf.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fbeowulf&data=04%7C01%7CRenfro%40tntech.edu%7Ce4b070f6b37645adf15808d983539bba%7C66fecaf83dc04d2cb8b8eff0ddea46f0%7C1%7C0%7C637685217402282601%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6Nz8oMRsE%2BwUZuaarhTWXAZ8ThB7zWUHJz%2BmVCo2bp4%3D&reserved=0>
>
>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit https://beowulf.org/cgi-bin/mailman/listinfo/beowulf
>
>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit https://beowulf.org/cgi-bin/mailman/listinfo/beowulf
>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit
> https://beowulf.org/cgi-bin/mailman/listinfo/beowulf
>


-- 
Dr Stuart Midgley
sdm900 at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://beowulf.org/pipermail/beowulf/attachments/20211001/9ad82f62/attachment-0001.htm>