Re: Fedora 32: setup with encrypted LVM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Mar 23, 2020 at 1:16 PM Chris Murphy <lists@xxxxxxxxxxxxxxxxx> wrote:
>
> On Sun, Mar 22, 2020 at 11:04 PM Chris Murphy <lists@xxxxxxxxxxxxxxxxx> wrote:
> >
> > I think I understand what you want to do: You want a disk partition ->
> > LUKS -> LVM PV -> LVM VG, and then /, /var, /home, swap to be XFS
> > formatted LVs.
> >
> > I'm not certain it's actually possible to do this,
>
> OK, it is possible to do this in Custom partitioning.
>
> Do not check this encrypt box which is the per LV box:
>
> https://drive.google.com/open?id=1BE3gJpw9FJUaecXLBvLzgogxGsPvY6dO
>
>
> Instead, click on the Modify button under the Volume Group drop-down
> menu, and check this encrypt box which applies to the PV/VG.
>
> https://drive.google.com/open?id=1nEzQy-Z03ovE6Ay410lLeK5h4dJ1x-A7

I just did an installation doing it this way, and I think the UI is
confusing. After choosing to encrypt the VG, and clicking OK to that
modify VG dialog, each mount point (each LV) has its own encrypt
checkbox also checked. However, they are no individually encrypted.

vda            252:0    0  100G  0 disk
├─vda1         252:1    0  600M  0 part
├─vda2         252:2    0    1G  0 part
└─vda3         252:3    0 98.4G  0 part
  └─f32luks    253:2    0 98.4G  0 crypt
    ├─f32-swap 253:3    0    3G  0 lvm
    ├─f32-root 253:4    0 64.1G  0 lvm
    └─f32-home 253:5    0 31.3G  0 lvm

/dev/vda3 is LUKS encrypted, and the resulting volume 'f32luks' is the
LVM PV. Each LV, swap, root, home, are plain LVs that are incidentally
encrypted by the fact they're on an encrypted PV. There is no double
encryption.

Reproduce steps
1. custom partitioning
2. LVM preset, click here to create automatically
3. Volume Group -> Modify -> check encrypt
--- unexpectedly, each LV now has encrypt option checked
4. Done, Begin installation


-- 
Chris Murphy
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux