[CentOS] LUKS layer / best practice

Tue Jun 16 23:51:26 UTC 2020
Leon Fauster <leonfauster at googlemail.com>

Am 16.06.20 um 23:07 schrieb Erick Perez - Quadrian Enterprises:
> 
> On Tue, Jun 16, 2020 at 3:00 PM Jason Edgecombe <jwedgeco at uncc.edu> wrote:
>>
>> I recommend having LUKS be "under" LVM. the layers would be:
>> /dev/sda -> partition (/dev/sda1) -> LUKS (/dev/sda1_crypt) -> LVM physical
>> volume -> volume group -> logical volume -> filesystem
>>
>> The layers described above are how the Ubuntu installer sets up an
>> encrypted LVM filesystem. As far as I know, TRIM is passed through LUKS and
>> the LVM layers if it's available in the hardware.
>>
>> Sincerely,
>> Jason
>>
 > Also, if you want to use deduplication (via VDO) then you must
 > remember to "dedupe then encrypt"
 > Storage > LUKS > VDO > LVM
 > old but good reference to: https://access.redhat.com/articles/2106521

Thats a good point. Thank you!

--
Leon