9:27 a.m.
Hi
If anyone ever wants to create virtual machines on an encrypted hard
disk then the notes here might help:
http://wiki.xensource.com/xenwiki/EncryptedPartitions
Chris
--
Chris Croome <chris(a)webarchitects.co.uk>
web design http://www.webarchitects.co.uk/
web content management http://mkdoc.com/
9:52 a.m.
On Tue, Jan 09, 2007 at 03:27:19PM +0000, Chris Croome wrote:
Hi
If anyone ever wants to create virtual machines on an encrypted hard
disk then the notes here might help:
http://wiki.xensource.com/xenwiki/EncryptedPartitions
That is a nice guide ! One question - you did the encryption on the
raw block device (/dev/md1) and then created LVM volumes within it.
Any reason you didn't do it the other way around. Eg, make /dev/md1
the PV in a VG, and then encrypt individual LVM logical volumes.
There shouldn't be any real difference in securitywith the latter
way, and it would remove the need to run 'vgscan' after running the
luksOpen command. It would also let you use difference LUKS passwords
on a per-VM basis if desired.
Regards,
Dan.
--
|=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=|
|=- Perl modules: http://search.cpan.org/~danberr/ -=|
|=- Projects: http://freshmeat.net/~danielpb/ -=|
|=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|
10:14 a.m.
i did the same a few days ago and the whole system freezes after i copied
a few mb into the encrypted volume (with the newest kernel)
i have no idea if it is related to this Problem -->
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213414 but i assume
not ..
Sven
"Daniel P. Berrange" <berrange(a)redhat.com>
Sent by: fedora-xen-bounces(a)redhat.com
01/09/07 04:52 PM
Please respond to
"Daniel P. Berrange" <berrange(a)redhat.com>
To
Chris Croome <chris(a)webarchitects.co.uk>
cc
xen-users(a)lists.xensource.com, fedora-xen(a)redhat.com
Subject
Re: [Fedora-xen] Encrypted virtual machines on Fedora Core 6
On Tue, Jan 09, 2007 at 03:27:19PM +0000, Chris Croome wrote:
Hi
If anyone ever wants to create virtual machines on an encrypted hard
disk then the notes here might help:
http://wiki.xensource.com/xenwiki/EncryptedPartitions
That is a nice guide ! One question - you did the encryption on the
raw block device (/dev/md1) and then created LVM volumes within it.
Any reason you didn't do it the other way around. Eg, make /dev/md1
the PV in a VG, and then encrypt individual LVM logical volumes.
There shouldn't be any real difference in securitywith the latter
way, and it would remove the need to run 'vgscan' after running the
luksOpen command. It would also let you use difference LUKS passwords
on a per-VM basis if desired.
Regards,
Dan.
--
|=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496
-=|
|=- Perl modules: http://search.cpan.org/~danberr/ -=|
|=- Projects: http://freshmeat.net/~danielpb/ -=|
|=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505
-=|
--
Fedora-xen mailing list
Fedora-xen(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-xen
10:21 a.m.
New subject: [Xen-users] Re: Encrypted virtual machines on Fedora Core 6
Hi
On Tue 09-Jan-2007 at 03:52:20PM +0000, Daniel P. Berrange wrote:
On Tue, Jan 09, 2007 at 03:27:19PM +0000, Chris Croome wrote:
>
> http://wiki.xensource.com/xenwiki/EncryptedPartitions
That is a nice guide ! One question - you did the encryption on the
raw block device (/dev/md1) and then created LVM volumes within it.
Any reason you didn't do it the other way around. Eg, make /dev/md1
the PV in a VG, and then encrypt individual LVM logical volumes.
There shouldn't be any real difference in securitywith the latter way,
and it would remove the need to run 'vgscan' after running the
luksOpen command. It would also let you use difference LUKS passwords
on a per-VM basis if desired.
Urm, no good reason, though I did want to just have to type one
passphrase once when Dom0 boots and then be able to create and resize
partitions on top of the crypted one without bothering with any LUKs
stuff...
Also although I have been using LUKs for a while I'm not so experienced
with LVM or Xen so it's been a learning curve and I didn't think of
doing it the way you have suggested... ;-)
Chris
--
Chris Croome <chris(a)webarchitects.co.uk>
web design http://www.webarchitects.co.uk/
web content management http://mkdoc.com/
6336
days inactive
6336
days old
3 comments
3 participants
participants (3)
-
Chris Croome -
Daniel P. Berrange -
Sven Oehme