[CentOS] Best configuration for encrypted software RAID 1?

[SilverTip257]

On Fri, May 17, 2013 at 12:42 PM, SilverTip257 <silvertip257 at gmail.com>wrote:

> On Fri, May 17, 2013 at 11:21 AM, Dave Johansen <davejohansen at gmail.com>wrote:
>
>>
>> >
>> > [0] https://wiki.archlinux.org/index.php/Dm-crypt_with_LUKS
>>
>> Thanks for the feedback. I'm actually doing this through an Anaconda
>> config file and I'm using the following settings:
>>
>> part raid.boota --size=500 --ondisk sda
>> part raid.bootb --size=500 --ondisk sdb
>> raid /boot --fstype=ext4 --level=1 --device=md0 raid.boota raid.bootb
>> part raid.slasha --grow --size=500 --ondisk sda
>> part raid.slashb --grow --size=500 --ondisk sdb
>> raid / --fstype=ext4 --level=1 --encrypted --passphrase=<passphrase>
>> --device=md1 raid.slasha raid.slashb
>>
>> Is that the "right" way to do it? Or is there a configuration that
>> would work better?
>>
>
> That looks right.  Maybe somebody else will have a tip.
>

You might also reference the advanced example here [0].

[0]
http://www.centos.org/docs/5/html/Installation_Guide-en-US/s1-kickstart2-options.html#s2-kickstart2-options-part-examples


>
> The key to your puzzle is --encrypted and you've got that.
>
> I don't have a kickstart config that has both software raid and luks
> encryption, so that's a scenario I have not tested.  Sounds like a perfect
> lab to spin up a VM on a Friday! :)
>
>
>>
>> Thanks,
>> Dave
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
>
> --
> ---~~.~~---
> Mike
> //  SilverTip257  //
>



-- 
---~~.~~---
Mike
//  SilverTip257  //