encrypted root howto (with device-mapper raid support)

[pent0z]

my home setup is

intel p4 2.8ghz HT
1gb ram

2x hd sata2 (200 gb)
a single raid0 volume of 400gb
/ as a 20 gb encrypted root partition
/home as a 380 gb encrypted root partition
booting from an external usb pendrive (the key for decrypting / and /home is there too)

i use a raid0 because an encrypted fs has NOT the same speed as a normal filesystem... so with a raid0 i get good I/O speed, however is not secure (if 1 of 2 hds fails... i'll lose everything...), but now i'll take a P4D 930 Dual Core CPU with 2gb ram and 2x 36gb sata 10000rpm for the / partition

after my experiences, i'm planning to write an howto describing how to:

install gentoo on an encrypted root filesystem (with device-mapper raid 0 or 1 support)
and
boot it from an usb device (pen drive or hd) containing the key for mount the encrypted fs

anyone interested? it will take about 2 days

[cynric]

There are already two wiki entries on encrypting root with DM-CRYPT. I know there are a couple of threads here in the Tips 'n Tricks section that a quick search would pull up. Always good to have new ideas, but you might want to read these to perhaps save yourself some time. Good luck.

With DM-Crypt
With DM-Crypt + LUKS
_________________
"This Snow Crash thing -- is it a virus, a drug, or a religion?" "What's the difference?"
-- Neal Stephenson - Snow Crash