Hi! On Wed, Apr 11, 2012 at 1:45 AM, Carlos E. R. <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-04-11 00:28, Ricardo Chung wrote:
On Tuesday, April 10, 2012 11:26:56 PM Carlos E. R. wrote:
Maybe I understood wrong. He said above (2nd mail) switched from LVM to BTRFS. Not sure how it was the precise procedure to change it. I assume he made it clean. Quoting "I selected LVM with encryption. Then I resized the partition (at this point Ext4) to be as big as possible (as YaST left quite a lot of empty space). Then I changed the root partition to be btrfs" explained HG.
I understand that means that he is using a root partition with btrfs on top on an encrypted LVM, which is the method Yast partitioner does.
But his writing is indeed confusing.
Sorry about that :-( I'll try better now - but this is going to be long. I wanted to have full disk encryption (for many reasons stated here, as well as here: http://en.opensuse.org/SDB:Encrypted_root_file_system ... and required by many companies) and btfrs as I thought I'd need to run quite modern filesystem on this SSD - and because btfrs was basically promoted by YaST in installation. Installation, from the first screen, I select my keyboard map and english. After the graphical installed starts, I need to reselect the keyboard map again as it's back to US. Not big, but still why. Ok, then starts the partitioning. Not too fond of LVM as I think simpler should be ok. I'm probably wrong there. Anyways, I was also wrong in following the page that let me believe that it works for "Opensuse 11.2 and newer" and was only tested on 11.4. I even followed the link to 11.4 documentation - except that only now I notice that the link which says 11.4 seems to point to a URL that has 112 in it. So, basically I was trying to follow this: http://www.suse.com/documentation/opensuse112/book_security/?page=/documenta... and 11.1.1 Creating an Encrypted Partition during Installation. I then selected BtrFS and opened the editing mode. Clicked on the / partition with BtrFS. Click Edit and I can see that the encryption is grayed out. So, I go back. Unselect BtrFS and try again. Now edit shows Etx4 for filesystem of / and I can select "Encrypt device". But clicking Next comes up with error that I cannot encrypt /. The guide that I linked, says "For this reason, the only appropriate course of action is to encrypt the entire root file system, along with the file system containing the sensitive data." This is why I asked if it is not possible anymore to encrypt the root partition. This was possible apparently. But not anymore. So, I go back again to try with LVM this time. So, I click LVM + encrypt (+ give password) + BtrFS (as that's still something I think I wanted). Now, I have 64Gb SSD. So, quite small. Still, the LVM setup only used 40Gb of my disk for / and 2Gb for swap (rest empty). So, in the edit mode, I try to click on resize, but then I'm greeted with error that BtrFS doesn't support resizing. Which is a bit odd as I don't think any changes have even been made to the disk yet! So, yet again, I go back and start from the top. This time, I checked only LVM and encryption. In edit, I see that LVM had now allocated only 20Gb for / which is now Ext4. But Ext4 allows for resizing, so I fill the disk. Then I click Accept and from the first screen edit again. I open the / with edit and just change the file system from under format partition from Ext4 to BtrFS and leave the encryption off as the LVM is now encrypted. At this point, I thought I have LVM encrypted, and / with BtrFS filling the disk (with swap) as I wanted. Time to hit accept and next and go on. And then I was greeted with the error that I wrote in the second email: Failure in mounting /dev/system/root to / System error code was: -3003 /bin/mount -t btrfs -o acl,user_xattr '/dev/system/root' '/mnt': mount: wrong fs type, bad option, bad superblock on /dev/mapper/system-root, missing codepage or helper program, or other error. In some cases useful info is found in syslog -try dmesg | tail or so Now, I apologize for my unclear writing in the previous emails and I really hope I was more clear this time. I would rather claim that the procedure on how to get encrypted BtrFS on openSUSE is quite hard and confusing. And it just didn't work. And the guides that I followed that lead me to believe that encrypting root partition on openSUSE is good idea were completely wrong as it's not possible anymore in 12.1. Saddest part of this story is that, once I got the system running (Ext4 and encryptions) I was greeted with the KDE 4 - and it still was confusing and and not as functional as KDE once was. Namely, I could still not figure out the workspaces for example. Wen't to KDE pages, but no tutorial, no examples. I just want a desktop that handles my windows. Also, dolphin is still so far from what konqueror was in KDE3. And the "start menu of KDE" still requires huge number of mouse clicks just to browse the programs that are in the menus. Why on earth somebody things all those clicks are necessary? BTW, I didn't wat the LibreOffice, but the installer didn't let me unselect that. All this lead me to first time in my life download Ubuntu. And while I miss YaST badly, I like the way how that ubuntu desktop, I guess Unity, let's me just go about my business of using the programs. No, the file browser isn't any better either. However, on the laptop, I'm now giving Ubuntu a chance for couple of weeks. I'm still going to run openSUSE on all of the servers as well as some laptops. Thanks for all the comments - specially about why to encrypt the whole disk. -- HG. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org