Re: LVM+RAID+CRYPT

[Stan Hoeppner <stan@hardwarefreak.com>]

Sjors van der Pluijm put forth on 1/8/2010 5:13 AM:

> 3. Is it ok to have swap and /boot on an encrypted LVM?

Never run encryption on swap.  Doing so merely burdens performance.  I doubt
even NSA, CIA, MI6 encrypt swap partitions on workstations.

I've never tried to boot from an encrypted /boot, so I really can't say if it
would work or not.  Why can't/won't you create 3 partitions?

[boot] 100MB mounted as /boot normal ext2
[swap] 1-8GB mounted as normal swap partition
[root] [remaining space] mounted as /root and encrypted however you like

--
Stan