Clone a system to an encrypted drive

Martin Cigorraga martincigorraga at gmail.com
Thu Jul 16 04:18:37 UTC 2015


Thank you!
(The rsync flags that Anaconda uses is definitely a plus)

On Wed, Jul 15, 2015, 23:58 Chris Murphy <lists at colorremedies.com> wrote:

> The gist is:
>
> cryptsetup, you can use the defaults which uses aes-xts-plain64 with a
> 256 bit key. I like the -y and -v options.
>
> You'll need to create or modify the /etc/crypttab file, which takes the
> form of:
> <anyname> <uuid> none
>
> The name can be anything but I do it the anaconda way which is
> luks-<uuid> and then <uuid> is the LUKS UUID reported by blkid.
>
> Use that same UUID in the form rd.luks=UUID=<uuid> as a boot parameter
> in /etc/default/grub and then grub2-mkconfig -o /boot/grub2/grub.cfg
> or
> grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
> as the case may be if you have a UEFI system
>
> And finally, the fstab entry is created the same as if it weren't
> encrypted, you still use the fs volume UUID as reported by blkid.
>
> And since i have it handy, the rsync command anaconda uses is:
>
> rsync -pogAXtlHrDx
>
> Chris Murphy
> --
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20150716/e110baa3/attachment.html>


More information about the users mailing list