Re: LVM+RAID+CRYPT

2010-01-10 Thread Celejar
On Fri, 8 Jan 2010 11:49:35 -0700 Matthew Moore anonymous.jon...@gmail.com wrote: On Friday January 8 2010 4:41:54 am Sjors van der Pluijm wrote: Just found out that /boot should not be in LVM because bootloaders might not understand it. /boot unencrypted does not seem to be the end of the

LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Hi all, I have been using Debian for a few years now. For my new workstation I want to try something new. What I want to do: 1. Make a RAID1 using two SATA discs 2. Create one partition on the RAID 3. Encrypt that partition 4. Use LVM on the partition I can't find very much info on this setup

LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Hi all, I have been using Debian for a few years now. For my new workstation I want to try something new. What I want to do: 1. Make a RAID1 using two SATA discs 2. Create one partition on the RAID 3. Encrypt that partition 4. Use LVM on the partition I can't find very much info on this setup

Re: LVM+RAID+CRYPT

2010-01-08 Thread Stan Hoeppner
Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I've never tried to boot from an encrypted /boot,

Re: LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Op vrijdag 8 januari 2010 12:26:37 schreef Stan Hoeppner: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on

Re: LVM+RAID+CRYPT

2010-01-08 Thread Mark Allums
On 1/8/2010 5:26 AM, Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I've

Re: LVM+RAID+CRYPT

2010-01-08 Thread randall
Sjors van der Pluijm wrote: Op vrijdag 8 januari 2010 12:26:37 schreef Stan Hoeppner: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even

Re: LVM+RAID+CRYPT

2010-01-08 Thread Γιώργος Πάλλας
Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I've never tried

Re: LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Op vrijdag 8 januari 2010 13:40:00 schreef Γιώργος Πάλλας: Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6

Re: LVM+RAID+CRYPT

2010-01-08 Thread Cassiano Leal
2010/1/8 Γιώργος Πάλλας gp...@ccf.auth.gr: Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap.  Doing so merely burdens performance.  I doubt even NSA, CIA, MI6 encrypt swap

Re: LVM+RAID+CRYPT

2010-01-08 Thread Jon Dowland
On Fri, Jan 08, 2010 at 12:13:14PM +0100, Sjors van der Pluijm wrote: Hi all, I have been using Debian for a few years now. For my new workstation I want to try something new. What I want to do: 1. Make a RAID1 using two SATA discs 2. Create one partition on the RAID 3. Encrypt that

Re: LVM+RAID+CRYPT

2010-01-08 Thread Matthew Moore
On Friday January 8 2010 4:41:54 am Sjors van der Pluijm wrote: Just found out that /boot should not be in LVM because bootloaders might not understand it. /boot unencrypted does not seem to be the end of the world. http://tldp.org/HOWTO/LVM-HOWTO/benefitsoflvmsmall.html Since we are being

Re: LVM+RAID+CRYPT

2010-01-08 Thread Stan Hoeppner
Matthew Moore put forth on 1/8/2010 12:49 PM: Since we are being paranoid, what happens if the NSA breaks into your home when you are asleep and installs a hypervisor on your /boot that records your password/keyfile next time you derypt? Until now I had no reason for an IMAP folder labeled

Re: LVM+RAID+CRYPT

2010-01-08 Thread Boyd Stephen Smith Jr.
In 4b47166d.8070...@hardwarefreak.com, Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Swap is okay. Boot depends on your boot loader. I don't know if grub2 can handle this or not. Never run encryption on swap.

Re: LVM+RAID+CRYPT

2010-01-08 Thread Ross Boylan
On Fri, 2010-01-08 at 05:26 -0600, Stan Hoeppner wrote: Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. This is completely contrary to the advice of the encryption folks. You MUST encrypt swap in order

Re: LVM+RAID+CRYPT

2010-01-08 Thread Alex Samad
On Fri, Jan 08, 2010 at 03:23:13PM +, Jon Dowland wrote: On Fri, Jan 08, 2010 at 12:13:14PM +0100, Sjors van der Pluijm wrote: Hi all, Hi I have a few laptops which I encrypt for work I have been using Debian for a few years now. For my new workstation I want to try something

Re: LVM+RAID+CRYPT

2010-01-08 Thread Stan Hoeppner
Ross Boylan put forth on 1/8/2010 1:53 PM: On Fri, 2010-01-08 at 05:26 -0600, Stan Hoeppner wrote: Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. This is completely contrary to the advice of the

Re: LVM+RAID+CRYPT

2010-01-08 Thread Mark Allums
On 1/8/2010 3:32 PM, Stan Hoeppner wrote: Ross Boylan put forth on 1/8/2010 1:53 PM: On Fri, 2010-01-08 at 05:26 -0600, Stan Hoeppner wrote: Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I bet every