On Mon, Jul 18, 2011 at 9:46 PM, Bruno Wolff III <br...@wolff.to> wrote:
> On Mon, Jul 18, 2011 at 21:51:01 +1000, > yudi v <yudi....@gmail.com> wrote: > > > > fine without any issues and I only have to enter the pass phrase once. > Now I > > would like to change this setup with the LVM layer below the LUKS layer. > > That way I do not have to worry about decrypting 500Gb at every boot. > > This won't affect that unless you are only going to encrypt some of the > LVs (e.g. just /home). > > Yes I might only encrypt some of the LV's, I am not sure right now. One of the main reasons for having the encryption layer on top of the LVM layer is to leave the LV's unmounted and encrypted until I need them. This cannot be achieved if the whole PV is encrypted. I will only decrypt /, /home, and swap at boot time and them will decrypt other LVs when I need them. I could not infer what you meant by "this won't affect that .." > I would like to know if there is a way to decrypt all the encrypted LVs > > with one pass phrase. > > If you use the same passphrase for the different encrypted devices you > will only need to enter it once (well, twice for now because of a bug > with handing off the passphrase to plymouth). > Cool, I did not know this. Thanks you. -- Kind regards, Yudi
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
