<p dir="ltr">Thank you!<br>
(The rsync flags that Anaconda uses is definitely a plus)</p>
<br><div class="gmail_quote"><div dir="ltr">On Wed, Jul 15, 2015, 23:58 Chris Murphy <<a href="mailto:lists@colorremedies.com">lists@colorremedies.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The gist is:<br>
<br>
cryptsetup, you can use the defaults which uses aes-xts-plain64 with a<br>
256 bit key. I like the -y and -v options.<br>
<br>
You'll need to create or modify the /etc/crypttab file, which takes the form of:<br>
<anyname> <uuid> none<br>
<br>
The name can be anything but I do it the anaconda way which is<br>
luks-<uuid> and then <uuid> is the LUKS UUID reported by blkid.<br>
<br>
Use that same UUID in the form rd.luks=UUID=<uuid> as a boot parameter<br>
in /etc/default/grub and then grub2-mkconfig -o /boot/grub2/grub.cfg<br>
or<br>
grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg<br>
as the case may be if you have a UEFI system<br>
<br>
And finally, the fstab entry is created the same as if it weren't<br>
encrypted, you still use the fs volume UUID as reported by blkid.<br>
<br>
And since i have it handy, the rsync command anaconda uses is:<br>
<br>
rsync -pogAXtlHrDx<br>
<br>
Chris Murphy<br>
--<br>
users mailing list<br>
<a href="mailto:users@lists.fedoraproject.org" target="_blank">users@lists.fedoraproject.org</a><br>
To unsubscribe or change subscription options:<br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/users</a><br>
Fedora Code of Conduct: <a href="http://fedoraproject.org/code-of-conduct" rel="noreferrer" target="_blank">http://fedoraproject.org/code-of-conduct</a><br>
Guidelines: <a href="http://fedoraproject.org/wiki/Mailing_list_guidelines" rel="noreferrer" target="_blank">http://fedoraproject.org/wiki/Mailing_list_guidelines</a><br>
Have a question? Ask away: <a href="http://ask.fedoraproject.org" rel="noreferrer" target="_blank">http://ask.fedoraproject.org</a><br>
</blockquote></div>