[CentOS] Best configuration for encrypted software RAID 1?

[SilverTip257]

On Fri, May 17, 2013 at 11:21 AM, Dave Johansen <davejohansen at gmail.com>wrote:

>
> >
> > [0] https://wiki.archlinux.org/index.php/Dm-crypt_with_LUKS
>
> Thanks for the feedback. I'm actually doing this through an Anaconda
> config file and I'm using the following settings:
>
> part raid.boota --size=500 --ondisk sda
> part raid.bootb --size=500 --ondisk sdb
> raid /boot --fstype=ext4 --level=1 --device=md0 raid.boota raid.bootb
> part raid.slasha --grow --size=500 --ondisk sda
> part raid.slashb --grow --size=500 --ondisk sdb
> raid / --fstype=ext4 --level=1 --encrypted --passphrase=<passphrase>
> --device=md1 raid.slasha raid.slashb
>
> Is that the "right" way to do it? Or is there a configuration that
> would work better?
>

That looks right.  Maybe somebody else will have a tip.

The key to your puzzle is --encrypted and you've got that.

I don't have a kickstart config that has both software raid and luks
encryption, so that's a scenario I have not tested.  Sounds like a perfect
lab to spin up a VM on a Friday! :)


>
> Thanks,
> Dave
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
---~~.~~---
Mike
//  SilverTip257  //