Thank you!
(The rsync flags that Anaconda uses is definitely a plus)
On Wed, Jul 15, 2015, 23:58 Chris Murphy <lists@xxxxxxxxxxxxxxxxx> wrote:
The gist is:
cryptsetup, you can use the defaults which uses aes-xts-plain64 with a
256 bit key. I like the -y and -v options.
You'll need to create or modify the /etc/crypttab file, which takes the form of:
<anyname> <uuid> none
The name can be anything but I do it the anaconda way which is
luks-<uuid> and then <uuid> is the LUKS UUID reported by blkid.
Use that same UUID in the form rd.luks=UUID=<uuid> as a boot parameter
in /etc/default/grub and then grub2-mkconfig -o /boot/grub2/grub.cfg
or
grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
as the case may be if you have a UEFI system
And finally, the fstab entry is created the same as if it weren't
encrypted, you still use the fs volume UUID as reported by blkid.
And since i have it handy, the rsync command anaconda uses is:
rsync -pogAXtlHrDx
Chris Murphy
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
