[linux-lvm] encryption in LVM2

[linux-lvm] encryption in LVM2

[Jon Bendtsen]

I only have experience with LVM1, but naturaly i've heard about LVM2,
and the device mapper.
Has anyone built in encryption into the device mapper ?
Is anyone working on it ?



JonB

Re: [linux-lvm] encryption in LVM2

[Jose Luis Domingo Lopez]

On Monday, 17 February 2003, at 16:34:45 +0100,
Jon Bendtsen wrote:

> I only have experience with LVM1, but naturaly i've heard about LVM2,
> and the device mapper.
> Has anyone built in encryption into the device mapper ?
> Is anyone working on it ?
> 
I don't know of anyone working on block-based encryption for LVM2/DM,
but by now you can try one of the several filesystem-level encryption
solutions out there. I have personally used loop-aes, it is simple to
set up and works ok on my boxes.

Hope it helps.

-- 
Jose Luis Domingo Lopez
Linux Registered User #189436     Debian Linux Sid (Linux 2.4.20-xfsip)

Re: [linux-lvm] encryption in LVM2

[Goetz Bock]

On Mon, Feb 17 '03 at 21:34, Jose Luis Domingo Lopez wrote:
> I don't know of anyone working on block-based encryption for LVM2/DM,
> but by now you can try one of the several filesystem-level encryption
> solutions out there. I have personally used loop-aes
hint: loop-aes is a block-based encryptor. It just happens to operate on
blocks in files, due to the limitations of loop device driver.

writing a personality for lvm2 to do blocklevel encryption would be nice

OTOH a group aware filesystem level encryption would be realy cool.
-- 
Goetz Bock       (c) 2003 as     blacknet.de - Munich - Germany   /"\
IT Consultant    GNU FDL 1.1    secure mobile Linux everNETting   \ /
                                                                   X
 ASCII Ribbon Campaign against HTML email & microsoft attachments / \

Re: [linux-lvm] encryption in LVM2

[Jon Bendtsen]

Goetz Bock wrote:
> 
> On Mon, Feb 17 '03 at 21:34, Jose Luis Domingo Lopez wrote:
> > I don't know of anyone working on block-based encryption for LVM2/DM,
> > but by now you can try one of the several filesystem-level encryption
> > solutions out there. I have personally used loop-aes
> hint: loop-aes is a block-based encryptor. It just happens to operate on
> blocks in files, due to the limitations of loop device driver.
> 
> writing a personality for lvm2 to do blocklevel encryption would be nice

thats what i figured, and i have this linux kernel course at my
university,
so why not actually write something usefull, and since LVM2 is done, and
encryption is done, how hard can it be combining the 2 ;-D

 
> OTOH a group aware filesystem level encryption would be realy cool.

reiserfs4 ? i heard some rumors about encryption, i dont know about
group awareness, but thats the advantage you get with a blocklevel
encryption, you can put any FS ontop.



JonB

Re: [linux-lvm] encryption in LVM2

[Jon Bendtsen]

Jose Luis Domingo Lopez wrote:
> 
> On Monday, 17 February 2003, at 16:34:45 +0100,
> Jon Bendtsen wrote:
> 
> > I only have experience with LVM1, but naturaly i've heard about LVM2,
> > and the device mapper.
> > Has anyone built in encryption into the device mapper ?
> > Is anyone working on it ?
> >
> I don't know of anyone working on block-based encryption for LVM2/DM,
> but by now you can try one of the several filesystem-level encryption
> solutions out there. I have personally used loop-aes, it is simple to
> set up and works ok on my boxes.

been there, done that. The problem is that then i cant use the snapshot
facility while the stuff is mounted, and i cant resize it while it is
mounted. I'd like that feature. Okay, i could just encrypt the
partition(s)
below LVM, but that is troubled too, as i might not want to encrypt all
my LV's, and either i might have to start severel loopback devices.
And as for loop-aes... no thanks, i cant even change my password.

> Hope it helps.

not really.



JonB