[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [linux-lvm] Help me understand LVM as it may be implemented in cryptsetup and (not?) Gparted

The F15 installer allows of encrypting the VG at boot time.  You seem to understand the concept of what you want to do, you just don’t realize you can do it.  During the OS install, select ‘Create Custom Layout’ and on the ‘LVM Physical Volume’ make sure ‘encrypt’ is checked.  The installer will ask for the password and take care of all the setup.


-- Jess Males


From: linux-lvm-bounces redhat com [mailto:linux-lvm-bounces redhat com] On Behalf Of neon_ bikini
Sent: Tuesday, July 19, 2011 12:02 PM
To: linux-lvm redhat com
Subject: [linux-lvm] Help me understand LVM as it may be implemented in cryptsetup and (not?) Gparted


I'm pushing my way up to this list as my question has languished in other forums...


Upgrading F11 to F15 I've decided to take advantage of disk encryption for my laptop. My experience with Anaconda finds limited support for custom disk partitions (mine is dual boot). The result of my second install attempt was a PV boot and LVM Volume Group with home, root, and swap. The problem is these three Logical Volumes were made each with their own encryption! Fedora documentation only gives instructions for setting encrypting during Anaconda as whole disk install or [after the system is installed](http://docs.fedoraproject.org/en-US/Fedora/15/html/Installation_Guide/apcs04.html).
From research and discussions I uncovered an [alternative](http://forums.fedoraforum.org/showpost.php?p=1496052&postcount=14) where the [VG is the only encrypted part](http://www.fedoraforum.org/forum/showpost.php?p=1383201&postcount=2) of the partition scheme. Then I can continue installing Fedora using a disk which includes the Anaconda installer. This would make an encrypted Fedora system with a single unencrypt passphrase.


What I am not clear on is the step to create the LVs. Reading cryptsetup docs and the above examples I conclude LuksOpen and LuksClose commands "bookend" the LVM linux commands pvcreate, vgcreate, and lvcreate. Then I won't use gparted at all?

Since I will be deleting the existing partitions, being careful not to disrupt the current Win partition (first), I need do all of this from a liveCD. And this disk needs to have the LVM commands pvcreate, vgcreate, lvcreate, and cryptsetup-luks, and dm-crypt packages?
Once the VG is encrypted and the LVs are added then I can launch the Fedora spin or Full i386 DVD with Anaconda and complete the install?

Does this sound correct? Am I missing anything? Is there an easier way to do this? (^_^)

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]