Re: raid1 with loop-aes

[Peter_22@xxxxxx]

Hi!

Since loop-aes.readme comprises eight examples of common use-cases as of today, may I suggest the admission of one or two examples for those recently asked software raid applications? There have been people using hardware raids with loop-aes before, as far as I can remember, but LVM2 seems to be the standard for software raids. A distinction between root-encryption with initrd modifications and plain volume raid seems reasonable. So, in case somebody from this mailing-list succeeds in raid encryption of either the *full* system or several partitions an example of this ought to be kept for the records.

Kind regards
Peter


-------- Original-Nachricht --------
> Datum: Wed, 29 Aug 2007 00:38:57 +0300
> Von: Jan Klod <janklodvan@xxxxxxxxx>
> An: linux-crypto@xxxxxxxxxxxx
> Betreff: raid1 with loop-aes

> Hi,
> 
> I created 2 equal sized partitions on separate disks:
> 
> /dev/hda2  --aes-->  /dev/loop1
> /dev/hdb4  --aes-->  /dev/loop2
> 
> after copying some data to /dev/loop1, I used mdadm:
> 
> mdadm --create /dev/md0 --level 1 --raid-devices=2 --auto=yes missing 
> /dev/loop1
> mkfs -t ext3 /dev/loop2
> mdadm --add /dev/md0 /dev/loop2
> 
> It took some time for kernel to finish syncing, I mounted partition and 
> everything seemed to be just fine.
> After rebooting there was no /dev/md0 and, if I do "mdadm --create .." 
> again, it was syncing just as long!
> 
> How you made your encrypted raid1 partitions work?
> I hope, raid1 doesn't have to do long syncing after every reboot - does
> it?
> Does above described raid1 usage means that CPU is encrypting the same 
> data twice?
> 
> --
> Regards,
> Jan
> 
> -
> Linux-crypto:  cryptography in and on the Linux system
> Archive:       http://mail.nl.linux.org/linux-crypto/

-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/