Re: [vserver] Encrypted Vservers

From: Adrian Reyer <are_at_lihas.de>
Date: Wed 25 Mar 2015 - 17:44:01 GMT
Message-ID: <20150325174401.GA12313@r2d2.s.lihas.de>

On Wed, Mar 25, 2015 at 10:25:09AM -0700, Laurens Vets wrote:
> The machines are all remote (they do not all have serial connections) and I
> want to make sure that if a server is removed or stolen no data can be
> obtained from the guests. I also make the assumption here that in order to
> remove the server, power will be cut. I don't really care about the host
> itself.

I install the base system on a plain partition, the rest of the disk is
a lukscrypt partition, this again is the base for a LVM.
The host /etc/fstab knows nothing about the LVM.
After boot, I run some script to decrypt the disk, mount the LVs and
start the VServers.

Best regards,
        Adrian

-- 
LiHAS - Adrian Reyer - Hessenwiesenstraße 10 - D-70565 Stuttgart
Fon: +49 (7 11) 78 28 50 90 - Fax:  +49 (7 11) 78 28 50 91
Mail: lihas_at_lihas.de - Web: http://lihas.de
Linux, Netzwerke, Consulting & Support - USt-ID: DE 227 816 626 Stuttgart
Received on Wed Mar 25 17:44:08 2015
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 25 Mar 2015 - 17:44:08 GMT by hypermail 2.1.8