[CentOS] LVM encryption and new volume group

[Robert Nichols]

On 03/05/2015 06:58 PM, Chris Murphy wrote:
> On Thu, Mar 5, 2015 at 2:09 PM, Tim <lists at kiuni.de> wrote:
>> Hello list,
>>
>> I bought a Thinkpad T420 and installed CentOS 7 recently.
>>
>> I choosed to use lvm encryption for the entire volume group. It works so far.
>>
>> But now I am planning to install a second hard disk. My thought is to create a new volume group on this additional disk.
>>
>> But how can I integrate/do this according to the existing encryption so that it will be decrypted by the same passphrase I use at startup?
>
> http://linux.die.net/man/5/crypttab
>
> When you create a new entry in crypttab, you can use the 3rd field to
> point to a file that contains the passphrase for this new LUKS volume.
> In effect, one passphrase gives access to both drives.

You don't even need to do that.  The init scripts try your passphrase
on every encrypted volume.  If that one passphrase unlocks everything,
you're done.  In a graphical boot, you don't even know which volume
you are being prompted to unlock (and the order is not consistent).

-- 
Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.