Re: [dm-crypt] The future of disk encryption with LUKS2

From: Arno Wagner <arno@wagner.name>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] The future of disk encryption with LUKS2
Date: Sat, 6 Feb 2016 03:58:54 +0100	[thread overview]
Message-ID: <20160206025854.GA5986@tansi.org> (raw)
In-Reply-To: <56B5356B.3030704@whgl.uni-frankfurt.de>

It might be the time of night, but I have no idea what you are 
trying to say....

Regards,
Arno

On Sat, Feb 06, 2016 at 00:51:07 CET, Sven Eschenberg wrote:
> It should be noted here, that LVM is incapable to resize when
> there'S multiple metadata areas (and that is certainly not a
> coincidence).
> 
> Arno, remember, that type of resizing usually only refers to
> filesystems that can be resized online and which is done by the FS
> itself (as in intriniscly). This is of course a limitation, but then
> again, who'd want to resize a dmcrypt container instead of
> recreating it, when using a filesystem that cannot be resized? That
> does not make too much sense too me, cause recreating the dm-crypt
> container is merely a single minor extra step when you recreate the
> filesystem anyway.
> 
> Regards
> 
> -Sven
> 
> Am 05.02.2016 um 16:57 schrieb Arno Wagner:
> >On Fri, Feb 05, 2016 at 16:08:28 CET, Robert Nichols wrote:
> >>On 02/04/2016 11:23 AM, Arno Wagner wrote:
> >>>On the other hand, resizing a Luks container with a
> >>>filesystem in there without killing that filesystem is
> >>>already complicated enough that I usually just recomend
> >>>a backup and recreation instead of a resize.
> >>
> >>Making an already difficult process more complex isn't going to
> >>win many friends.  Sounds like what you need is a "--resizefs"
> >>option like the one LVM's lvresize uses to invoke fsadm(8).
> >
> >And thereby limit what filesystem can be in there? That is
> >a rather gross layering-violation and not a good idea.
> >
> >Do not forget that backup and restore need to be tested
> >and the backup done regularly anyways if the data has any
> >worth. I an not asking people to do anything new. (Well,
> >except for those with only throwaway-data in their encrypted
> >containers....)
> >
> >Regards,
> >Arno
> >
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier