-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2015-05-16 15:05, Anton Aylward wrote:
On 05/15/2015 09:59 PM, Carlos E. R. wrote:
You really want to argue both sides as seems fit. On the one hand the installer is too complicated with all its options for idiots to use and they use the defaults because they don't know any better, and on the other the idiots are going to go for a complex installation with sophisticated, non-standard, far from default settings.
No, I'm trying to explain how people can end using LVM without even knowing they are. Full encryption of the system is something laptop owners do, and YaST makes that offer. It is very easy to do, automatic. Try :-) Believe me, I have seen several people pop up questions on forums with crashed systems, and on investigation (ie, telling them to post fdisk - -l output), we discovered they had LVM. They had no idea that they did, nor how they did it. Just that their systems no longer booted.
A novice asking for full encryption, seeing it requires LVM ... Perhaps what qualifies him for the Award is not stopping and asking "Hey? What's LVM"?'
They do not need to know. Believe me, I have seen novices do it first time they come to openSUSE. Some after using Ubuntu. It is an option in YaST. Just click click click.
But the GUI is like ... Well most people understand cars and can drive and understand steering wheel and the gas pedal. This makes them think they can drive anything with a wheel in each corner and a steering wheel! That isn't so. 80% of the people I know here in Canada can't drive a shift. Of those that can, I think only a couple even know how to drive a shift that doesn't have have synchronizes,
I do :-) [Off topic start] The most historically popular car in Spain, the first my father had, was "the 600" (the Spanish version of the fiat 600). The 1st gear was not synchronized. As a kid I remember reading in a magazine that people going from 2nd to 1st had often to full brake the car and start again, and the magazine explained what to do instead. Much later, when I learned to drive, I learned the trick for reducing a gear with double shift: my car gears were hard to change, and the trick, even when nominally unnecessary, worked. Recently I was shopping for a car. One of the gadgets they offered me (no automatic gear) was a delayed brake-shift operation, when on a back slope: think release the brake, the same foot goes to the accelerator, and if you are not fast enough, the car starts sliding backwards. The traditional trick is to handle the shift pedal (left foot), brake-accelerator (right foot), and hand (parking) brake, simultaneously. Many people can't handle that (I can). Think parking on a slope (and Spain is hilly), and you have to add the steering wheel on your remaining hand. Well, new cars just delay the foot break release till you press the accelerator a second later, automatically. New times! [Off topic end]
Certainly I know that if I want to do this I can, and I can make ALL of a disk a single LVM store. The idea that you only get a 30G FS on an encrypted LV using LVM on a much larger disk has NOTHING to do with LVM. It may be built into the GUI, in which case blame yast, once again. It may be that the user set the 30G limit or it may be that the real "idiot" is in the GUI designer "assuming" no-one would want a encrypted FS bigger than that.
Based on the information Carlos gives, we can't tell.
I have not done fully encrypted systems that way (I do not like LVM), so I can't give you personal details of how it is made. I assume it is documented in the book. What I do know is that the defaults do not encrypt the entire disk, but only a smallish portion, because I have seen some people pop up with that problem in forums or mail lists.
But there is a lot of myth and assumption in the arguments people are making against LVM. That I speak at length countering them is because I'm making things very explicit.
I believe that LVM is good, but I'm against using it unless you fully understand it. I don't, so I don't use it. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF0EAREIAAYFAlVX61IACgkQja8UbcUWM1yDBgD4lHAnuDbl27ndgwzBUalWZCpF l9DEZ5DPMkwt+rsPOgD/fmIVtcDRAWd6RUq6wCAd5B/b/+XB9nmj4i3o7FRYeK4= =R4A3 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org