encryption in LVM2

I only have experience with LVM1, but naturaly i've heard about LVM2, and the device mapper.
Has anyone built in encryption into the device mapper ?
Is anyone working on it ?

JonB

I don't know of anyone working on block-based encryption for LVM2/DM, but by now you can try one of the several filesystem-level encryption solutions out there. I have personally used loop-aes, it is simple to set up and works ok on my boxes.

Hope it helps.

Jose Luis Domingo Lopez
Linux Registered User #189436     Debian Linux Sid (Linux 2.4.20-xfsip)

hint: loop-aes is a block-based encryptor. It just happens to operate on blocks in files, due to the limitations of loop device driver.

writing a personality for lvm2 to do blocklevel encryption would be nice

OTOH a group aware filesystem level encryption would be realy cool.

Goetz Bock       (c) 2003 as     blacknet.de - Munich - Germany   /"\
IT Consultant    GNU FDL 1.1    secure mobile Linux everNETting   \ /
                                                                   X
 ASCII Ribbon Campaign against HTML email & microsoft attachments / \

thats what i figured, and i have this linux kernel course at my university,
so why not actually write something usefull, and since LVM2 is done, and encryption is done, how hard can it be combining the 2 ;-D

reiserfs4 ? i heard some rumors about encryption, i dont know about group awareness, but thats the advantage you get with a blocklevel encryption, you can put any FS ontop.

JonB

been there, done that. The problem is that then i cant use the snapshot facility while the stuff is mounted, and i cant resize it while it is mounted. I'd like that feature. Okay, i could just encrypt the partition(s)
below LVM, but that is troubled too, as i might not want to encrypt all my LV's, and either i might have to start severel loopback devices. And as for loop-aes... no thanks, i cant even change my password.

not really.

JonB