Re: LUKS layer / best practice

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Am 16.06.20 um 23:07 schrieb Erick Perez - Quadrian Enterprises:

On Tue, Jun 16, 2020 at 3:00 PM Jason Edgecombe <jwedgeco@xxxxxxxx> wrote:

I recommend having LUKS be "under" LVM. the layers would be:
/dev/sda -> partition (/dev/sda1) -> LUKS (/dev/sda1_crypt) -> LVM physical
volume -> volume group -> logical volume -> filesystem

The layers described above are how the Ubuntu installer sets up an
encrypted LVM filesystem. As far as I know, TRIM is passed through LUKS and
the LVM layers if it's available in the hardware.

Sincerely,
Jason

> Also, if you want to use deduplication (via VDO) then you must
> remember to "dedupe then encrypt"
> Storage > LUKS > VDO > LVM
> old but good reference to: https://access.redhat.com/articles/2106521

Thats a good point. Thank you!

--
Leon


_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]


  Powered by Linux