Gentoo Archives: gentoo-user

From: Wols Lists <antlists@××××××××××××.uk>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] KDE, sddm etc security. Plus LVM question.
Date: Sat, 19 Mar 2022 19:45:32
Message-Id: 4c3f3c32-bb3b-3602-6015-4e9a6bcd4068@youngman.org.uk
In Reply to: Re: [gentoo-user] KDE, sddm etc security. Plus LVM question. by Dale
1 On 19/03/2022 13:20, Dale wrote:
2 > I'm moving to encrypting some directories.  To do that, I need a empty
3 > drive first to put encryption on.  Then I can encrypt, move stuff that
4 > isn't encrypted then add drives back until everything that I want is
5 > encrypted.  I'm assuming I can have one large logical volume that is
6 > encrypted across more than one drive.  Right now, I have 3 drives for
7 > /home.  I got space to remove one and then start encrypting and adding
8 > other drives to the encrypted stuff.
9
10 I've got dm-integrity running over my bare partition. I guess you could
11 use dm-security/luks. No reason why not.
12
13 Then I use raid-5 over that to combine 3 3TB partitions into a 6TB
14 device. Which has lvm on that. And then I have my other partitions
15 (basically just /home) on top of that.
16
17 So if I need more space I just add a new drive with dm-integrity, add
18 that into my raid, and grow the raid, lvm, and my /home ...
19
20 "simples", as the meerkats say ...
21
22 Cheers,
23 Wol