Hi Chris, thanks for your answer.
It is the first time I decided to encrypt my lvm. I choosed to encrypt the volume group, not every logical volume itself, because in case of doing lvm snapshots in that group they will be encrypted too? And how do I create a new encrypted volume group? Regards Tim Am 6. März 2015 01:58:23 MEZ, schrieb Chris Murphy <[email protected]>: >On Thu, Mar 5, 2015 at 2:09 PM, Tim <[email protected]> wrote: >> Hello list, >> >> I bought a Thinkpad T420 and installed CentOS 7 recently. >> >> I choosed to use lvm encryption for the entire volume group. It works >so far. >> >> But now I am planning to install a second hard disk. My thought is to >create a new volume group on this additional disk. >> >> But how can I integrate/do this according to the existing encryption >so that it will be decrypted by the same passphrase I use at startup? > >http://linux.die.net/man/5/crypttab > >When you create a new entry in crypttab, you can use the 3rd field to >point to a file that contains the passphrase for this new LUKS volume. >In effect, one passphrase gives access to both drives. > >So there's a pro con here. Pro is that you could actually opt for a >completely different passphrase for the 2nd drive, but never have to >directly type it in. The con is that should you forget this >passphrase, and its only location is on the primary drive that's >already encrypted and that drive dies - then anything on the 2nd drive >cannot be decrypted. Oops. So be careful of that. > > >-- >Chris Murphy >_______________________________________________ >CentOS mailing list >[email protected] >http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list [email protected] http://lists.centos.org/mailman/listinfo/centos
