Hi all,
with regard to LUKS; should it placed before LVM or after? Any recommendations? TRIM command fully supported through all layers etc?
-- Leon
I recommend having LUKS be "under" LVM. the layers would be: /dev/sda -> partition (/dev/sda1) -> LUKS (/dev/sda1_crypt) -> LVM physical volume -> volume group -> logical volume -> filesystem
The layers described above are how the Ubuntu installer sets up an encrypted LVM filesystem. As far as I know, TRIM is passed through LUKS and the LVM layers if it's available in the hardware.
Sincerely, Jason
--------------------------------------------------------------------------- Jason Edgecombe | Linux Administrator UNC Charlotte | The William States Lee College of Engineering 9201 University City Blvd. | Charlotte, NC 28223-0001 Phone: 704-687-1943 jwedgeco@uncc.edu | http://engr.uncc.edu | Facebook --------------------------------------------------------------------------- If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-1943. Thank you.
On Tue, Jun 16, 2020 at 1:42 PM Leon Fauster via CentOS centos@centos.org wrote:
Hi all,
with regard to LUKS; should it placed before LVM or after? Any recommendations? TRIM command fully supported through all layers etc?
-- Leon _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Also, if you want to use deduplication (via VDO) then you must remember to "dedupe then encrypt" Storage > LUKS > VDO > LVM old but good reference to: https://access.redhat.com/articles/2106521
On Tue, Jun 16, 2020 at 3:00 PM Jason Edgecombe jwedgeco@uncc.edu wrote:
I recommend having LUKS be "under" LVM. the layers would be: /dev/sda -> partition (/dev/sda1) -> LUKS (/dev/sda1_crypt) -> LVM physical volume -> volume group -> logical volume -> filesystem
The layers described above are how the Ubuntu installer sets up an encrypted LVM filesystem. As far as I know, TRIM is passed through LUKS and the LVM layers if it's available in the hardware.
Sincerely, Jason
Jason Edgecombe | Linux Administrator UNC Charlotte | The William States Lee College of Engineering 9201 University City Blvd. | Charlotte, NC 28223-0001 Phone: 704-687-1943 jwedgeco@uncc.edu | http://engr.uncc.edu | Facebook
If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-1943. Thank you.
On Tue, Jun 16, 2020 at 1:42 PM Leon Fauster via CentOS centos@centos.org wrote:
Hi all,
with regard to LUKS; should it placed before LVM or after? Any recommendations? TRIM command fully supported through all layers etc?
-- Leon _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Am 16.06.20 um 23:07 schrieb Erick Perez - Quadrian Enterprises:
On Tue, Jun 16, 2020 at 3:00 PM Jason Edgecombe jwedgeco@uncc.edu wrote:
I recommend having LUKS be "under" LVM. the layers would be: /dev/sda -> partition (/dev/sda1) -> LUKS (/dev/sda1_crypt) -> LVM physical volume -> volume group -> logical volume -> filesystem
The layers described above are how the Ubuntu installer sets up an encrypted LVM filesystem. As far as I know, TRIM is passed through LUKS and the LVM layers if it's available in the hardware.
Sincerely, Jason
Also, if you want to use deduplication (via VDO) then you must remember to "dedupe then encrypt" Storage > LUKS > VDO > LVM old but good reference to: https://access.redhat.com/articles/2106521
Thats a good point. Thank you!
-- Leon
-
Erick Perez - Quadrian Enterprises -
Jason Edgecombe -
Leon Fauster