Aw: Re: [gentoo-user] dm-crypt + ext4 = where will the journal go?

[Roland Häder]

> You forgot the link to [1].
Already mailed but here again:
http://wiki.gentoo.org/wiki/DM-Crypt

> Never used loop-aes myself. Sorry if I miss the reason for your
> confusion because of it.
http://loop-aes.sourceforge.net

There is the source code. It needs patched util-linux(-ng) package to get working. Also you should not use (crypt-)loop because it conflicts with it (see README inside tar ball). It also provides a really simple swap encryption:

- /etc/fstab -
/dev/blaX       none    swap    sw,loop=/dev/loop0,encryption=AES256,itercountk=100     0       0

This will make sure that everytime you bootup your system a new encryption is setup with an iteration of 100 (still performant enough for most things).

> Opening a dmcrypt volume creates a mapped block device in /dev/mapper.
> You treat it like a partition and format it with ext4. Unless you use
> some exotic flags for mke2fs, the journal will be put on the same block
> device and is encrypted along with the rest of it.
>
> So: No need to worry about it.
Thank you for the explanation. Maybe it should be added to the wiki?

>
> Hope this helps,
> Florian Philipp
Sure it does. :)

Roland