Hi Arno,
i formatted the whole text floating - but readable.
The hotmail webmailer seems to throw some returns away.
I`m sorry - i try a correct formatted post later.
To your question:
the order of my "way to an encrypted raid" is this:
#1 i use 4 HDDs.
#2 i made a Soft raid5 with mdadm
#3 i made a lage logical volume with lvm
#4 i created an encrypted device of that lvm (1,39TB)
#5 i decrypted the device, mapped it as decrypted raid under /dev/mapper/raid
and formatted it.
#######
This was the way to my encryption desaster:
root@homeserver:~# cryptsetup luksOpen /dev/mapper/lvm2\|vg\|crypted_raid
crypted_raid -d /mnt/usb/key.md0.orig
key slot 0 unlocked.
Command successful.
root@homeserver:~# cryptsetup luksOpen /dev/mapper/lvm2\|vg\|crypted_raid raid
-d /mnt/usb/key.md0.orig
key slot 0 unlocked.
Command successful.
root@homeserver:~# cd /dev/mapper/
root@homeserver:/dev/mapper# ls
control hda1 hda5 lvm2|vg|crypted_raid raid sde1
root@homeserver:/dev/mapper# mke2fs -b 4096 -j /dev/mapper/raid
mke2fs 1.38 (30-Jun-2005)
Filesystem label=
OS type: Linux
Block size=4096 (log=2)
Fragment size=4096 (log=2)
178257920 inodes, 356515583 blocks
17825779 blocks (5.00%) reserved for the super user
First data block=0
10880 block groups
32768 blocks per group, 32768 fragments per group
16384 inodes per group
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000, 214990848
Writing inode tables: done
Creating journal (32768 blocks): done
Writing superblocks and filesystem accounting information: done
##########
Since then the de- and encryption works fine: i copied about 200GB Data onto the
decrypted raid. I pulled one HDD and formatted it separately. I added it later
to the raid and it resynced. After resync all data was fine (checked with
MD5Sum). Do i didn`t worry to use it for some weeks in test mode and switched
after approx. 1 month heavy duty to raid only.... my fault, because i should
have made at least some backups in encrypted containers on HDD....
cu,
DP
---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx
