Arch Linux

cprussin

Member

Registered: 2010-07-20

Posts: 9

Root on LVM lv on vg spanning multiple dm-crypt/LUKS-encrypted pvs

Hi guys-

I'm on an eeePc 901, with the (dumb) 4gb soldered drive along with the 16gb SSD.  I also have an 8gb SD card.  I would like to have the following setup:

Physical Devices and Partitions
------------------------------------
/dev/sda - 4gb soldered
-> /dev/sda1 - format as ext2, mount to /boot
-> /dev/sda2 - encrypt with dm-crypt and LUKS to /dev/mapper/crypta
/dev/sdb - 16gb SSD
-> /dev/sdb1 - encrypt with dm-crypt and LUKS to /dev/mapper/cryptb
/dev/sdc - 8gb SD
-> /dev/sdc1 - encrypt with dm-crypt and LUKS to /dev/mapper/cryptc

Unencrypted Partitions
---------------------------
crypta - use as pv for vg "vga"
cryptb - use as pv for vg "vga"
cryptc - format as ext2, mount to /home

VGs and LVs
----------------
vga
-> lva - format as ext2, mount to /
-> lvb - format as ext2, mount to /usr
-> lvc - use for /tmp

My problem is, my grub menu.lst kernel line needs to have an additional "cryptdevice" parameter, but it does not seem to take two.  Thus:

kernel /vmlinuz26 root=/dev/mapper/vga-lva cryptdevice=/dev/sda2:vga cryptdevice=/dev/sdb1:vga ro

does not seem to unencrypt both sda2 and sdb1, the drives necessary for vga.  Is anybody familiar with a way to unencrypt both drives?

EDIT:  It seems to work if I only use the second cryptdevice, as in:

kernel /vmlinuz26 root=/dev/mapper/vga-lva cryptdevice=/dev/sdb1:vga ro

Last edited by cprussin (2010-07-20 16:58:37)

delcypher

Member

Registered: 2010-04-17

Posts: 42

Re: Root on LVM lv on vg spanning multiple dm-crypt/LUKS-encrypted pvs

Hi I've managed to solve this problem. See my post https://bbs.archlinux.org/viewtopic.php … 95#p827495

synthead

Member

Registered: 2006-05-09

Posts: 1,337

Re: Root on LVM lv on vg spanning multiple dm-crypt/LUKS-encrypted pvs

https://aur.archlinux.org/packages.php?ID=56476