Help me understand how cryptsetup works and confirm it can't be used with GParted...
Upgrading F11 to F15 I've decided to encrypt the disk. Anaconda appears to have limited support for custom disk partitions (mine is dual boot). The result of my second install attempt was a PV boot and LVM VG with home, root, and swap. The problem is these LVs each have their own encryption! The Fedora documentation only gives instructions for encrypting during Anaconda install process and after a system is installed.
From research and discussions I uncovered an alternative where the the VG is only encrypted "bit" of the partitioned drive. Then I can install Fedora using a spin disk or the 4G iso with Anaconda. This would make an encrypted Fedora system with a single unencrypt passphrase. What I am not clear on is the step to create the LVs.
Reading cryptsetup docs and the above examples I conclude LuksOpen and LuksClose commands "bookend" the LVM linux commands pvcreate, vgcreate, and lvcreate. Then I won't need to use gparted the graphical disk partitioning tool, yes?
Since I will be deleting my system, I need do all of this from a liveCD like gparted, or a Fedora spin liveCD. And this disk needs to have the LVM commands pvcreate, vgcreate, lvcreate, and cryptsetup-luks, and dm-crypt packages?
Once the VG is encrypted and the LVs are added then I can launch the Fedora spin CDROM or Anaconda DVD to complete the install?
Does this sound correct? Am I missing anything? Is there an easier way to do this? (^_^)
Hope this helps
Thanks for taking the time to reply in detail.
These notes are the culmination of all my research. Unless there is something I'm missing, then this is what I'm gonna do the first chance I get.
One other thing. I want to put my home directory in,
instead of the default,
I've not installed with a separate /home partition before. Will someone tell me (presumably someone who installs a lot of systems) if If I make this directory in advance of the installer, will Anaconda honor this file structure?
|All times are GMT -5. The time now is 10:53 AM.|