On 11/30/2015 10:07 PM, Gordon Messmer wrote: > On 11/30/2015 01:06 PM, Gordon Messmer wrote: >> You can add a PV to encrypt the system without rebooting. > > ... should note that you'll have to shrink at least one of your volumes, though. The encrypted PV that you create will be slightly smaller than it was, before encryption. As a result, there won't be enough extents to move all of the volumes off and then back. Not always. The PV is used in multiple of the segment size, so, depending on rounding errors you may have some free blocks. For example, if you use 64MiB as segment, a 650MiB PV will contain 10 of them. The same PV when encrypted will be 649.99MiB (just guessing...), but it will perfectly contain 10 segments again. This was very true when partition were very badly aligned (factors 63, 16, 255 around); nowadays because of 4k disks and SSD, things are better aligned so it may actually happen that you miss one segment and one filesystem must be resized. Again, if the PV goes up to the end of the disk, you have probably some misaligned ending block, so you are lucky again (even SSD have kept the strange habit of being sized in 10^3 instead that 2^10). Regards. -- Roberto Ragusa mail at robertoragusa.it -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
