luks on lvm on raid: is it safe (meaning stable)?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear all!

I have a question regarding luks on lvm:

Currently I am running LUKS on a 6-disk raid 5, where every disk has 1
primary partition that takes part in the raid. So far no problems. But I'm
running out of space.

So I would like to buy 2 new drives, set them up as a raid 1 (for
convenience i would add the whole drives to the raid without creating
partitions on them), add the raid as (the only) volume to a lvm volume group
and put several partitions on the lvm: unencrypted ones for root, home ...
and one encrypted to hold critical data. Then I intend to copy over the data
from the 6 disk encrypted raid5 to the new drives' encrypted logical
partition and dismantle the 6 drives.

I think such a setup is perfectly valid, but is there any concern putting
luks on a virtual partition in a volume group consisting of a raid1? Do I
need to take something special into account, like setting up lvm in a
special way (certain block size...) to make it work smoothly with luks? Do I
need to tell luks some additional information such that it is installed on
lvm? Is such a setup as stable as putting luks on real partitions?

Should I fill the whole disk with /dev/urandom or just the partition that
will hold the luks volume?

What if I add another disk (or raid volume) to the volume group in order to
expand the space in future? Will that disturb luks? I have done a smooth
raid5 expansion from 4 to 5 to 6 disks in the past followed by a luks
expansion and an ext3 expansion, but never an lvm expansion...

Thanx for help, regards,
Wolfgang

- --
Wenn die meisten sich schon armseliger Kleider und Möbel schämen, wieviel
mehr sollten wir uns da erst armseliger Ideen und Weltanschauungen schämen?
  Albert Einstein








-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJGMeNR6b2EdogPFsRAlhKAJ48u84gEsEkAvgrhJDwKPPuwTo+RQCgkZcH
IY/8XKql2kV9aD0r41MlUCY=
=rESG
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux