Document now, organize later.
Collection of useful practices/shortcuts/tests.
5 dollars for a 2TB hard drive?
Bought 3, with smarts 14/34/44%, only remapped sectors, other values are ok. How long will they last in raid?
Let's build poor Johny's datacenter!
Installing linux on an encrypted drive.
Before encryption:
Pre-encrypt
"Filling a to-be-encrypted drive with random data mainly has two uses:
-get rid of old, unencrypted data
-make free space indistuingishable from encrypted data"
(longer anwser https://security.stackexchange.com/questions/79683/initialization-of-a-luks-encrypted-partition-with-cipher-or-dev-urandom)
Mainstream method: dd if=/dev/urandom of=/dev/path to the drive Double check! (lsblk,blkid etc) ~40MB/s
There is a faster method:
"Use the kernel's crypto module to initialize the partition/disk do this:
cryptsetup create --key-file=/dev/urandom eraseme /dev/sde
dd if=/dev/zero bs=1M of=/dev/mapper/eraseme
cryptsetup remove eraseme
This initializes a crypto mapping named eraseme spanning the partition/disk using data from /dev/urandom as the key. Writes zeros to the mapping and then deletes the mapping. Use --cipher option to use non-default cipher if required." ~ 80MB/s
(https://security.stackexchange.com/questions/79683/initialization-of-a-luks-encrypted-partition-with-cipher-or-dev-urandom)
raid1- boot
raid1- lvm- / & swap
Collection of useful practices/shortcuts/tests.
5 dollars for a 2TB hard drive?
Bought 3, with smarts 14/34/44%, only remapped sectors, other values are ok. How long will they last in raid?
Let's build poor Johny's datacenter!
Installing linux on an encrypted drive.
Before encryption:
Pre-encrypt
"Filling a to-be-encrypted drive with random data mainly has two uses:
-get rid of old, unencrypted data
-make free space indistuingishable from encrypted data"
(longer anwser https://security.stackexchange.com/questions/79683/initialization-of-a-luks-encrypted-partition-with-cipher-or-dev-urandom)
Mainstream method: dd if=/dev/urandom of=/dev/path to the drive Double check! (lsblk,blkid etc) ~40MB/s
There is a faster method:
"Use the kernel's crypto module to initialize the partition/disk do this:
cryptsetup create --key-file=/dev/urandom eraseme /dev/sde
dd if=/dev/zero bs=1M of=/dev/mapper/eraseme
cryptsetup remove eraseme
This initializes a crypto mapping named eraseme spanning the partition/disk using data from /dev/urandom as the key. Writes zeros to the mapping and then deletes the mapping. Use --cipher option to use non-default cipher if required." ~ 80MB/s
(https://security.stackexchange.com/questions/79683/initialization-of-a-luks-encrypted-partition-with-cipher-or-dev-urandom)
raid1- boot
raid1- lvm- / & swap
