Re: Why can I view my encrypted lvm logical volumes without opening them with my passphrase?

[Robert Nichols]

On 4/3/20 4:48 AM, Sreyan Chakravarty wrote:
> I just installed Fedora 31 on my laptop. I had created a volume group and logical volumes from the Anaconda installer itself. I had marked the checkbox for encrypting my fedora partition , and when booting I am asked my passphrase, so I thought everything was fine.
>
> But when I am booting into a live environment and do an `lsblk` . This is my output:
> NAME                              MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
> sda                                 8:0    0 931.5G  0 disk
> ├─sda1                              8:1    0   512M  0 part
> ├─sda2                              8:2    0   512M  0 part
> └─sda3                              8:3    0 930.5G  0 part
>    ├─vgfedora-root-real            253:0    0   700G  0 lvm
>    │ ├─vgfedora-root               253:1    0   700G  0 lvm
>    │ └─vgfedora-before_hibernate   253:3    0   700G  0 lvm
>    └─vgfedora-before_hibernate-cow 253:2    0    50G  0 lvm
>      └─vgfedora-before_hibernate   253:3    0   700G  0 lvm
> **How on earth are my Volume Groups visible from the live environment?** I did not even open up with `cryptsetup open --type luks2 /dev/sda3` . What is going on here ?
> As you can see **I have created a snapshot, is that even encrypted ?** Or is it only my root ? **I need everything to be encrypted even snapshots.**
> I can even do a `vgchange -a y` and select all my logical volumes. **This really should not happen as it should not even be visible from the live environment** . Again what is going on ?
> **How can I verify what is encrypted and what is not ?**

Run "lsblk" with the "-f" option to get more type information.