On 03/05/2015 06:58 PM, Chris Murphy wrote:
On Thu, Mar 5, 2015 at 2:09 PM, Tim lists@kiuni.de wrote:
Hello list,
I bought a Thinkpad T420 and installed CentOS 7 recently.
I choosed to use lvm encryption for the entire volume group. It works so far.
But now I am planning to install a second hard disk. My thought is to create a new volume group on this additional disk.
But how can I integrate/do this according to the existing encryption so that it will be decrypted by the same passphrase I use at startup?
http://linux.die.net/man/5/crypttab
When you create a new entry in crypttab, you can use the 3rd field to point to a file that contains the passphrase for this new LUKS volume. In effect, one passphrase gives access to both drives.
You don't even need to do that. The init scripts try your passphrase on every encrypted volume. If that one passphrase unlocks everything, you're done. In a graphical boot, you don't even know which volume you are being prompted to unlock (and the order is not consistent).