Re: LVM+RAID+CRYPT

2010-01-10 Thread Celejar
On Fri, 8 Jan 2010 11:49:35 -0700 Matthew Moore wrote: > On Friday January 8 2010 4:41:54 am Sjors van der Pluijm wrote: > > Just found out that /boot should not be in LVM because bootloaders might > > not understand it. /boot unencrypted does not seem to be the end of the > > world. http://tld

Re: LVM+RAID+CRYPT

2010-01-08 Thread Mark Allums
On 1/8/2010 3:32 PM, Stan Hoeppner wrote: Ross Boylan put forth on 1/8/2010 1:53 PM: On Fri, 2010-01-08 at 05:26 -0600, Stan Hoeppner wrote: Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I bet every t

Re: LVM+RAID+CRYPT

2010-01-08 Thread Stan Hoeppner
Ross Boylan put forth on 1/8/2010 1:53 PM: > On Fri, 2010-01-08 at 05:26 -0600, Stan Hoeppner wrote: >> >> Never run encryption on swap. Doing so merely burdens performance. I >> doubt >> even NSA, CIA, MI6 encrypt swap partitions on workstations. > This is completely contrary to the advice of t

Re: LVM+RAID+CRYPT

2010-01-08 Thread Alex Samad
On Fri, Jan 08, 2010 at 03:23:13PM +, Jon Dowland wrote: > On Fri, Jan 08, 2010 at 12:13:14PM +0100, Sjors van der Pluijm wrote: > > Hi all, Hi I have a few laptops which I encrypt for work > > > > I have been using Debian for a few years now. For my new workstation I want > > to > > try

Re: LVM+RAID+CRYPT

2010-01-08 Thread Ross Boylan
On Fri, 2010-01-08 at 05:26 -0600, Stan Hoeppner wrote: > > Never run encryption on swap. Doing so merely burdens performance. I > doubt > even NSA, CIA, MI6 encrypt swap partitions on workstations. This is completely contrary to the advice of the encryption folks. You MUST encrypt swap in orde

Re: LVM+RAID+CRYPT

2010-01-08 Thread Boyd Stephen Smith Jr.
In <4b47166d.8070...@hardwarefreak.com>, Stan Hoeppner wrote: >Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: >> 3. Is it ok to have swap and /boot on an encrypted LVM? Swap is okay. Boot depends on your boot loader. I don't know if grub2 can handle this or not. >Never run encryption on s

Re: LVM+RAID+CRYPT

2010-01-08 Thread Stan Hoeppner
Matthew Moore put forth on 1/8/2010 12:49 PM: > Since we are being paranoid, what happens if the NSA breaks into your home > when you are asleep and installs a hypervisor on your /boot that records your > password/keyfile next time you derypt? Until now I had no reason for an IMAP folder labele

Re: LVM+RAID+CRYPT

2010-01-08 Thread Matthew Moore
On Friday January 8 2010 4:41:54 am Sjors van der Pluijm wrote: > Just found out that /boot should not be in LVM because bootloaders might > not understand it. /boot unencrypted does not seem to be the end of the > world. http://tldp.org/HOWTO/LVM-HOWTO/benefitsoflvmsmall.html Since we are being

Re: LVM+RAID+CRYPT

2010-01-08 Thread Jon Dowland
On Fri, Jan 08, 2010 at 12:13:14PM +0100, Sjors van der Pluijm wrote: > Hi all, > > I have been using Debian for a few years now. For my new workstation I want > to > try something new. What I want to do: > 1. Make a RAID1 using two SATA discs > 2. Create one partition on the RAID > 3. Encrypt t

Re: LVM+RAID+CRYPT

2010-01-08 Thread Cassiano Leal
2010/1/8 Γιώργος Πάλλας : > Stan Hoeppner wrote: >> >> Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: >> >> >>> >>> 3. Is it ok to have swap and /boot on an encrypted LVM? >>> >> >> Never run encryption on swap.  Doing so merely burdens performance.  I >> doubt >> even NSA, CIA, MI6 encrypt sw

Re: LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Op vrijdag 8 januari 2010 13:40:00 schreef Γιώργος Πάλλας: > Stan Hoeppner wrote: > > Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: > >> 3. Is it ok to have swap and /boot on an encrypted LVM? > > > > Never run encryption on swap. Doing so merely burdens performance. I > > doubt even NSA, C

Re: LVM+RAID+CRYPT

2010-01-08 Thread Γιώργος Πάλλας
Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I've never tried t

Re: LVM+RAID+CRYPT

2010-01-08 Thread randall
Sjors van der Pluijm wrote: Op vrijdag 8 januari 2010 12:26:37 schreef Stan Hoeppner: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NS

Re: LVM+RAID+CRYPT

2010-01-08 Thread Mark Allums
On 1/8/2010 5:26 AM, Stan Hoeppner wrote: Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I've

Re: LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Op vrijdag 8 januari 2010 12:26:37 schreef Stan Hoeppner: > Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: > > 3. Is it ok to have swap and /boot on an encrypted LVM? > > Never run encryption on swap. Doing so merely burdens performance. I > doubt even NSA, CIA, MI6 encrypt swap partitions

Re: LVM+RAID+CRYPT

2010-01-08 Thread Stan Hoeppner
Sjors van der Pluijm put forth on 1/8/2010 5:13 AM: > 3. Is it ok to have swap and /boot on an encrypted LVM? Never run encryption on swap. Doing so merely burdens performance. I doubt even NSA, CIA, MI6 encrypt swap partitions on workstations. I've never tried to boot from an encrypted /boot,

LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Hi all, I have been using Debian for a few years now. For my new workstation I want to try something new. What I want to do: 1. Make a RAID1 using two SATA discs 2. Create one partition on the RAID 3. Encrypt that partition 4. Use LVM on the partition I can't find very much info on this setup an

LVM+RAID+CRYPT

2010-01-08 Thread Sjors van der Pluijm
Hi all, I have been using Debian for a few years now. For my new workstation I want to try something new. What I want to do: 1. Make a RAID1 using two SATA discs 2. Create one partition on the RAID 3. Encrypt that partition 4. Use LVM on the partition I can't find very much info on this setup an