[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: initramfs-utils and LVM ?



On Sat, Nov 04, 2006 at 11:14:04AM +0100, maximilian attems wrote:
On Fri, 03 Nov 2006, Hadmut Danisch wrote:

Thanks for the hint. I was reading that skript when I wrote my own
one. Unfortunately the initramfs hooks did not support what I was
looking for. I was in contact with the luks package maintainers.
The scripts that come with debian support (or at least supported at
that time) only encrypting the volumes inside an LVM separately.

please explain what you mean by aboves sentence.
afaik cryptoroot on top of a lvm is supported as well as
lvm on top of luks.

In contrast, I wanted to encrypt the whole LVM volume in one luks
volume and hide it's volume structure, and to require only a single
password and luks mount step. It works pretty well, there's just one
big luks volume on the disk, and all partitions including root is
hidden inside this LVM. This also reduces overhead, because you don't
have to cope with the encryption when adding new logical volumes.

again i don't understand your wording.
addding alpix on cc.

I'm not quite sure I follow, but the cryptsetup initramfs scripts have supported both crypto on LVM and LVM on crypto for some while now.

In fact, that is the setup that you'll get if you choose to do an automated encrypted installation with current daily snapshots of debian-installer (one small unencrypted /boot, one large luks-encrypted partition with LVM ontop).

--
David Härdeman



Reply to: