{"action":"opened","issue":{"url":"https://api.github.com/repos/hashicorp/consul/issues/835","labels_url":"https://api.github.com/repos/hashicorp/consul/issues/835/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/consul/issues/835/comments","events_url":"https://api.github.com/repos/hashicorp/consul/issues/835/events","html_url":"https://github.com/hashicorp/consul/issues/835","id":65811052,"number":835,"title":"Don't persist gossip encryption keys","user":{"login":"grantr","id":680,"avatar_url":"https://avatars.githubusercontent.com/u/680?v=3","gravatar_id":"","url":"https://api.github.com/users/grantr","html_url":"https://github.com/grantr","followers_url":"https://api.github.com/users/grantr/followers","following_url":"https://api.github.com/users/grantr/following{/other_user}","gists_url":"https://api.github.com/users/grantr/gists{/gist_id}","starred_url":"https://api.github.com/users/grantr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grantr/subscriptions","organizations_url":"https://api.github.com/users/grantr/orgs","repos_url":"https://api.github.com/users/grantr/repos","events_url":"https://api.github.com/users/grantr/events{/privacy}","received_events_url":"https://api.github.com/users/grantr/received_events","type":"User","site_admin":true},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-02T01:21:07Z","updated_at":"2015-04-02T01:21:07Z","closed_at":null,"body":"A common security recommendation is to store credentials and secret keys on a ramdisk so that they go away if the host is rebooted and are never persisted.\r\n\r\nWould it be possible to (optionally) store the keyring state only in memory? With this enabled, the agent would always use the provided key on start, trusting that it will be the current key, then get the rest of the keyring from other nodes.\r\n\r\nAn external system would be responsible for ensuring that each node has the correct key to use on start.\r\n\r\nOne workaround for not having this feature is putting the entire serf directory on a ramdisk. Would that cause any issues? Is there state in the serf directory that needs to be persisted across reboots?"}}