Re: raid1 with loop-aes

[email protected]
Newsgroups gmane.linux.cryptography,gmane.spam.detected
Message-ID <[email protected]>
Hi!

Since loop-aes.readme comprises eight examples of common use-cases as of today, may I suggest the admission of one or two examples for those recently asked software raid applications? There have been people using hardware raids with loop-aes before, as far as I can remember, but LVM2 seems to be the standard for software raids. A distinction between root-encryption with initrd modifications and plain volume raid seems reasonable. So, in case somebody from this mailing-list succeeds in raid encryption of either the *full* system or several partitions an example of this ought to be kept for the records.

Kind regards
Peter


-------- Original-Nachricht --------
> Datum: Wed, 29 Aug 2007 00:38:57 +0300
> Von: Jan Klod <[email protected]>
> An: [email protected]
> Betreff: raid1 with loop-aes

> Hi,
> 
> I created 2 equal sized partitions on separate disks:
> 
> /dev/hda2  --aes-->  /dev/loop1
> /dev/hdb4  --aes-->  /dev/loop2
> 
> after copying some data to /dev/loop1, I used mdadm:
> 
> mdadm --create /dev/md0 --level 1 --raid-devices=2 --auto=yes missing 
> /dev/loop1
> mkfs -t ext3 /dev/loop2
> mdadm --add /dev/md0 /dev/loop2
> 
> It took some time for kernel to finish syncing, I mounted partition and 
> everything seemed to be just fine.
> After rebooting there was no /dev/md0 and, if I do "mdadm --create .." 
> again, it was syncing just as long!
> 
> How you made your encrypted raid1 partitions work?
> I hope, raid1 doesn't have to do long syncing after every reboot - does
> it?
> Does above described raid1 usage means that CPU is encrypting the same 
> data twice?
> 
> --
> Regards,
> Jan
> 
> -
> Linux-crypto:  cryptography in and on the Linux system
> Archive:       http://mail.nl.linux.org/linux-crypto/

-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.