04.01.2017 18:41, Daniel Selinger пишет: ...
Looks like it. I wholeheartedly agree that p.2 is plain bug and it should be possible to manually enable encryption at least in the same configuration which installer offers. And it is not possible to enable encryption for LVM even without RAID at all (strictly speaking, the problem is that it is not possible to create encrypted partition). encryption for lvm without raid works as far as i could tell, also when manually creating. you have to enable the encryption when creating the lvm partitions on the physical drives, not when creating the lvm itself.
It does not activate checkbox for me using Leap 42.2. The only partition type where I can check "Encrypt" is swap. Ironically it also allows it for "Win95 FAT32" partition ... Unfortunately installer does not offer these partition types for PV selection then :(
although there is a bug in the installer that sometimes doesn't let you check the encryption checkbox even if it's supported for the current configuration. in that cases it helps to switch the listbox to a different filesystem / partitiontype, when switching back to what you want the checkbox gets enabled (not so for btrfs on md devices)
Yes, I remember this pretty much erratic behavior, and it also is (was) dependent on legacy BIOS vs. UEFI boot mode (for some reasons installer thought encryption was OK on EFI but not on BIOS). Still this is a bug - *if* it is allowed it must be possible to select when partition is created.
As for p.3 - I did it in the past so in general it should work. There could be arbitrary problems using new shiny tools, so YMMV. Unfortunately this will remain so until someone actually spends time and efforts to build and debug such configuration. ok, looks like i have to give it another shot. but somehow i didn't even get a password prompt at bootup for decrypting the disks when i manually created the luks volume on the software raid, although the installer played just fine with the configuration.
It could be unrelated issue, I remember bug reports about missing password prompts. It could also be that installer did not add necessary modules to initrd. This needs investigation.
do you remember what configuration worked for you? raid -> luks -> lvm -> btrfs?
Yes, I believe so. Actually I became curious ... I think I'll try with Leap 42.2 now. :) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org