2.1 KiB
2.1 KiB
DBan Plus Plus
Connection
| Storage Type | Connection Type | Method | Implemented? | Notes |
|---|---|---|---|---|
| Hard Drive (SATA) | SATA | 5.25" 4x Bay 3.5" Enclosure > 4x SATA SAS Card > PCIe Slot A | Yes | |
| Solid State Drive (SATA) | SATA | 5.25" 4x Bay 2.5" Enclosure > 4x SATA SAS Card > PCIe Slot A | Yes | |
| Solid State Drive (NVMe) | PCIe/M.2 | 5.25" 4x Bay NVMe Enclosure > MiniSAS to M.2 > M.2 Slot A | No | Not showing up in BIOS |
Erasing
| Storage Type | Erase Type | Method | Implementation | Implemented? |
|---|---|---|---|---|
| Hard Drive (SATA) | - Baseline - Secure Erase - Decommission |
- Clear Partitions - 3 Pass Write - 7 Pass Write |
- sgdisk - nwipe - nwipe |
Yes Yes Yes |
| Solid State Drive (SATA) | - Baseline - Secure Erase - Decommission |
- Clear Partitions - Secure Erase - 7 Pass Write |
- sgdisk - hdparm - nwipe |
Yes Yes Yes |
| Solid State Drive (NVMe) | - Baseline - Secure Erase - Decommission |
- Clear Partitions - Secure Erase - 7 Pass Write |
- sgdisk - nvme_cli - nwipe |
Yes Yes Yes |
Other
| Goal | Task | Reasoning | Implemented? | Notes |
|---|---|---|---|---|
| Erasure Environment | Setup Alpine Linux Environment with SquashFS/No Persistence | Lightweight Linux Distro that can be loaded into RAM and be edited. Avoids wiping USB but also can be used on any machine and customized. |
Yes | |
| Scripted Erase Tool | Write a script to guide the erase process | Allows for ease of use, and ensures consistent workflow Can also tie in user auth, logging, etc |
Yes | Done via bash scripting in erase_drive.sh |
| User Authentication | Implement user authentication | For Auditing, Logging, connection to network shares, etc. | No | Probably kerb auth via krb5 |
| Logging | Implement logging | For auditing purposes | No | Record user, drive serial, grab user list (if windows/unix drive), grab hostname, record script inputs |
| Ticket Notes | Add ticket note through script | To keep keyword searchable records associated with a ticket | No | Send email to Otobo with small details such as level, hostname, serial, etc Might involve policy changes for when a ticket should be created. |