Does encrypted SWAP support suspend-to-disk?

[yudi v]

I am planning on installing Fedora with LUKS over LVM as follows:

sda1   ntfs
sda2   /boot  ext
sda3 - PV and VG
- lv_swap  swap  (encrypted LV)
-lv_root    / ext4 (encrypted LV)
-lv_home /home ext4 ( (encrypted LV))
-rest unassigned - I will assign and encrypt as the need arises.
 sda4 extended
sda5  vfat

Is it suspend-to-disk supported? I cannot find any documentation except for
this 2007 article in redhat magazine, is it still valid.

http://magazine.redhat.com/2007/01/18/disk-encryption-in-fedora-past-present...

[admin lewis]

2011/7/21 yudi v :
> I am planning on installing Fedora with LUKS over LVM as follows:
>
> sda1   ntfs
> sda2   /boot  ext
> sda3 - PV and VG
> lv_swap  swap  (encrypted LV)
>
> -lv_root    / ext4 (encrypted LV)
> -lv_home /home ext4 ( (encrypted LV))
> -rest unassigned - I will assign and encrypt as the need arises.
> sda4 extended
> sda5  vfat
>  Is it suspend-to-disk supported? I cannot find any documentation except for
> this 2007 article in redhat magazine, is it still valid.
>  http://magazine.redhat.com/2007/01/18/disk-encryption-in-fedora-past-present...

This is my mount:
# mount|egrep -i 'sda|mapper'
/dev/mapper/vg_whitebox-lv_root on / type ext4
(rw,relatime,seclabel,barrier=1,data=ordered)
/dev/sda1 on /boot type ext4 (rw,relatime,seclabel,barrier=1,data=ordered)
/dev/mapper/vg_whitebox-lv_root on /tmp type ext4
(rw,relatime,seclabel,barrier=1,data=ordered)
/dev/mapper/vg_whitebox-lv_root on /var/tmp type ext4
(rw,relatime,seclabel,barrier=1,data=ordered)
/dev/mapper/vg_whitebox-lv_root on /home type ext4
(rw,relatime,seclabel,barrier=1,data=ordered)

# swapon -s
Filename				Type		Size	Used	Priority
/dev/mapper/vg_whitebox-lv_swap         partition	4063228	186940	0

I've selinux enabled, lvm and encrypted root and it works. It's a bit
slow on my macbook, but it works.
> --
> Kind regards,
> Yudi

;-) lewis

[yudi v]

On Thu, Jul 21, 2011 at 11:12 PM, admin lewis  wrote:
> 2011/7/21 yudi v :
> > I am planning on installing Fedora with LUKS over LVM as follows:
> >
> > sda1   ntfs
> > sda2   /boot  ext
> > sda3 - PV and VG
> > lv_swap  swap  (encrypted LV)
> >
> > -lv_root    / ext4 (encrypted LV)
> > -lv_home /home ext4 ( (encrypted LV))
> > -rest unassigned - I will assign and encrypt as the need arises.
> > sda4 extended
> > sda5  vfat
> >  Is it suspend-to-disk supported? I cannot find any documentation except
>
> for
> > this 2007 article in redhat magazine, is it still valid.
>
> http://magazine.redhat.com/2007/01/18/disk-encryption-in-fedora-past-present...
> >
>
> This is my mount:
> # mount|egrep -i 'sda|mapper'
> /dev/mapper/vg_whitebox-lv_root on / type ext4
> (rw,relatime,seclabel,barrier=1,data=ordered)
> /dev/sda1 on /boot type ext4 (rw,relatime,seclabel,barrier=1,data=ordered)
> /dev/mapper/vg_whitebox-lv_root on /tmp type ext4
> (rw,relatime,seclabel,barrier=1,data=ordered)
> /dev/mapper/vg_whitebox-lv_root on /var/tmp type ext4
> (rw,relatime,seclabel,barrier=1,data=ordered)
> /dev/mapper/vg_whitebox-lv_root on /home type ext4
> (rw,relatime,seclabel,barrier=1,data=ordered)
>
> # swapon -s
> Filename                                Type            Size    Used
>  Priority
> /dev/mapper/vg_whitebox-lv_swap         partition       4063228 186940  0
>
> I've selinux enabled, lvm and encrypted root and it works. It's a bit
> slow on my macbook, but it works.

Is the PV encrypted or the individual LVs. I have LUKS on top of LVM. Is
your setup similar?

[admin lewis]

2011/7/21 yudi v :
> On Thu, Jul 21, 2011 at 11:12 PM, admin lewis  wrote:
> > 2011/7/21 yudi v :
> > > I am planning on installing Fedora with LUKS over LVM as follows:
> > >
> > > sda1   ntfs
> > > sda2   /boot  ext
> > > sda3 - PV and VG
> > > lv_swap  swap  (encrypted LV)
> > >
> > > -lv_root    / ext4 (encrypted LV)
> > > -lv_home /home ext4 ( (encrypted LV))
> > > -rest unassigned - I will assign and encrypt as the need arises.
> > > sda4 extended
> > > sda5  vfat
> > >  Is it suspend-to-disk supported? I cannot find any documentation except
> > > for
> > > this 2007 article in redhat magazine, is it still valid.
> > >
> > > http://magazine.redhat.com/2007/01/18/disk-encryption-in-fedora-past-present...
> >
> > This is my mount:
> > # mount|egrep -i 'sda|mapper'
> > /dev/mapper/vg_whitebox-lv_root on / type ext4
> > (rw,relatime,seclabel,barrier=1,data=ordered)
> > /dev/sda1 on /boot type ext4 (rw,relatime,seclabel,barrier=1,data=ordered)
> > /dev/mapper/vg_whitebox-lv_root on /tmp type ext4
> > (rw,relatime,seclabel,barrier=1,data=ordered)
> > /dev/mapper/vg_whitebox-lv_root on /var/tmp type ext4
> > (rw,relatime,seclabel,barrier=1,data=ordered)
> > /dev/mapper/vg_whitebox-lv_root on /home type ext4
> > (rw,relatime,seclabel,barrier=1,data=ordered)
> >
> > # swapon -s
> > Filename                                Type            Size    Used
> >  Priority
> > /dev/mapper/vg_whitebox-lv_swap         partition       4063228 186940  0
> >
> > I've selinux enabled, lvm and encrypted root and it works. It's a bit
> > slow on my macbook, but it works.
>
> Is the PV encrypted or the individual LVs. I have LUKS on top of LVM. Is
> your setup similar?

I'm sorry, but looking into more deeply the swap seems not encrypted:
# blkid
/dev/root: LABEL="Fedora-12-i686-L"
UUID="26d2c620-1f88-4fb5-afb4-57d314d1fbb8" TYPE="ext4"
/dev/sda1: UUID="1d863159-ee60-4130-a09f-8581b2cf3289" TYPE="ext4"
/dev/sda2: UUID="58d856bf-ac6d-4d51-af42-cef0c52f5081" TYPE="crypto_LUKS"
/dev/mapper/luks-58d856bf-ac6d-4d51-af42-cef0c52f5081:
UUID="LH01XA-HNHd-9Qq9-IROy-SJF9-vjuZ-jPGjCW" TYPE="LVM2_member"
/dev/mapper/vg_whitebox-lv_swap:
UUID="4b19768d-3fe1-428a-96ff-a9a961a68cc3" TYPE="swap"

by lewis