[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Encrypted block devices and RAID



Bruno Wolff III wrote:
On Tue, Feb 12, 2008 at 08:48:01 +0100,
  Alexander Todorov <atodorov redhat com> wrote:
Hi folks,
browsing through the kickstart page on the wiki I found that both the
part and raid commands have the --encrypted options.
What will happen when mixing them as in the example below:

Which ones of the above are true?

Encryption is stackable, so you should be able to mix and match it anywhere
in the stack of block devices.

That's a nice thing to hear.

That said, for raid it probably makes more sense to encrypt on top of raid
rather than below it so as to save some work. Your raid layout usually
isn't secret and leaving it visible shouldn't be a problem. This allows
you to encrypt each block of data once rather than once per raid array
element.

I totally agree. Just wanted to know what will happen in a weird set-up.

Thanks,
Alexander.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]