Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 19/20 > Security and Privacy
FedoraForum Search

Forgot Password? Join Us!

Security and Privacy Sadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 19th July 2010, 07:28 PM
remarkable Offline
Registered User
 
Join Date: Jun 2005
Posts: 7
linuxfedorafirefox
LUKS encryption at partition level or LVM?

I'm planning a fresh F13 install, with separate partitions for /boot, /home, /tmp, /, and swap. All but /boot will be logical volumes, and I'd like to encrypt all but boot. If I encrypt the underlying partitions, is there any reason to also encrypt the logical volumes themselves?

my system will be:
HP dv6-3040us Pavillion laptop
AMD Phenon II
4GB DDR3
Reply With Quote
  #2  
Old 20th July 2010, 12:34 AM
bodhi.zazen Offline
Registered User
 
Join Date: Jul 2006
Location: Montana
Posts: 731
windows_xp_2003firefox
Re: LUKS encryption at partition level or LVM?

easiest way is to make a single crypt, use the crypt as a PV , then make your LV.

This way you have separate partitions (as you wish) within a single crypt. The advantage is you would only need to enter your password once as you boot.
__________________
If it is not broken, tweak it... If you break Fedora you get to keep both pieces :p
Reply With Quote
  #3  
Old 20th July 2010, 01:50 AM
remarkable Offline
Registered User
 
Join Date: Jun 2005
Posts: 7
linuxfedorafirefox
Re: LUKS encryption at partition level or LVM?

thanks for your reply. My reasoning for separate partitions for /home, /tmp, and swap is for future Fedora releases - I'll create a new PV/VG for F14, and just drag /home along. And since one (F12, F13, F14, ...) runs at a time, it can use the same /tmp and swap (I actually carve those two from the same VG). Does that make sense?
Reply With Quote
  #4  
Old 21st July 2010, 07:38 PM
bodhi.zazen Offline
Registered User
 
Join Date: Jul 2006
Location: Montana
Posts: 731
windows_xp_2003firefox
Re: LUKS encryption at partition level or LVM?

Quote:
Originally Posted by remarkable View Post
thanks for your reply. My reasoning for separate partitions for /home, /tmp, and swap is for future Fedora releases - I'll create a new PV/VG for F14, and just drag /home along. And since one (F12, F13, F14, ...) runs at a time, it can use the same /tmp and swap (I actually carve those two from the same VG). Does that make sense?
Yes. The only 'problem" you may have , each install tends to re-format swap. So to recycle it across your installs you will need to edit /etc/fstab.

If you have enough RAM perhaps you do not need a swap.
__________________
If it is not broken, tweak it... If you break Fedora you get to keep both pieces :p
Reply With Quote
Reply

Tags
encryption, level, luks, lvm, partition

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] How to enable encryption with luks scott36 Security and Privacy 2 18th June 2010 09:21 PM
Full disk encryption(LUKS) password Security and Privacy 3 5th June 2010 02:52 PM
Cryptsetup and LUKS Encryption with Linux Vector Guides & Solutions (No Questions) 4 15th July 2009 12:30 PM
LUKS encryption and power outages LinuxTom Security and Privacy 10 15th November 2008 05:49 PM
How To Remove Disk Encryption From a partition ( LUKS passphrase issue ) Tuxic Security and Privacy 3 9th November 2008 07:29 PM


Current GMT-time: 20:54 (Tuesday, 29-07-2014)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat