There are several ways to wipe a block storage device. The traditional way is
to set the lvm_type to thin, and then use the volume_clear
parameter. Alternatively, if the volume encryption feature is used, then
volume wiping is not necessary if the volume encryption key is deleted.
See the OpenStack Configuration Reference doc in the Volume Encryption
section for set up details and also the Castellan usage document
for key deletion.
Note
In older OpenStack releases, lvm_type=default was used to signify a
wipe. While this method still works, lvm_type=default is not
recommended for setting secure delete.
The volume_clear parameter can accept either zero or shred
arguments. The zero argument will write a single pass of zeroes to the
device. The shred argument will write three passes of predetermined bit
patterns.
For more information about the lvm_type parameter, see
the LVM Block Storage section
of OpenStack Configuration Reference and the Oversubscription in thin provisioning of OpenStack Administrator Guide.
For more information about the volume_clear parameter, see the
Block Storage sample configuration files
of OpenStack Configuration Reference.
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.