WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

[Xen-users] Re: [Fedora-xen] Encrypted virtual machines on Fedora Core 6

To: Chris Croome <chris@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-users] Re: [Fedora-xen] Encrypted virtual machines on Fedora Core 6
From: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Date: Tue, 9 Jan 2007 15:52:20 +0000
Cc: xen-users@xxxxxxxxxxxxxxxxxxx, fedora-xen@xxxxxxxxxx
Delivery-date: Tue, 09 Jan 2007 07:52:19 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20070109152719.GA15033@xxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <20070109152719.GA15033@xxxxxxxxxxxxxxxxxxx>
Reply-to: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.4.1i
On Tue, Jan 09, 2007 at 03:27:19PM +0000, Chris Croome wrote:
> Hi
> 
> If anyone ever wants to create virtual machines on an encrypted hard
> disk then the notes here might help:
> 
>   http://wiki.xensource.com/xenwiki/EncryptedPartitions

That is a nice guide ! One question - you did the encryption on the 
raw block device (/dev/md1) and then created LVM volumes within it.
Any reason you didn't do it the other way around. Eg, make /dev/md1
the PV in a VG, and then encrypt individual LVM logical volumes.
There shouldn't be any real difference in securitywith the latter
way, and it would remove the need to run 'vgscan' after running the
luksOpen command. It would also let you use difference LUKS passwords
on a per-VM basis if desired.

Regards,
Dan.
-- 
|=- Red Hat, Engineering, Emerging Technologies, Boston.  +1 978 392 2496 -=|
|=-           Perl modules: http://search.cpan.org/~danberr/              -=|
|=-               Projects: http://freshmeat.net/~danielpb/               -=|
|=-  GnuPG: 7D3B9505   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505  -=| 

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>