Re: Kdump with full-disk LUKS encryption

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Apr 19, 2021 at 01:12:07PM -0400, Simo Sorce wrote:
> On Mon, 2021-04-19 at 12:02 +0100, Richard W.M. Jones wrote:
> > On Mon, Apr 19, 2021 at 06:00:38PM +0800, Kairui Song wrote:
> > > 2. LUKS2 prefers Argon2 as the key derivation function, designed to
> > > use a lot of memory. kdump is expected to use a minimal amount of
> > > memory. Users will have to reserve a huge amount of memory for kdump
> > > to work (eg. 1G reserve for kdump with 4G total memory which is not
> > > reasonable).
> > 
> > I'm just going to sympathise with you rather than provide a good
> > answer here ...  We had the same problem in libguestfs where Argon2
> > used too much memory for our small appliance when opening LUKS2 disks.
> > We had to simply increase the amount of memory reserved, which is far
> > from ideal.
> 
> Or you could switch to use PBKDF2, it is still a supported and
> reasonable option.

This is v2v of random, existing guests, so switching the encryption
isn't an option.

Rich.

> Simo.
> 
> -- 
> Simo Sorce
> RHEL Crypto Team
> Red Hat, Inc
> 
> 
> 
> _______________________________________________
> devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-builder quickly builds VMs from scratch
http://libguestfs.org/virt-builder.1.html
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux