similar to: storage backup with encryption on-the-fly ?

On 06/04/2023 16:12, Peter Krempa wrote: > On Thu, Apr 06, 2023 at 15:22:10 +0200, lejeczek wrote: >> Hi guys. >> >> Is there a solution, perhaps a function of libvirt, to backup guest's >> storage and encrypt the resulting image file? >> On-the-fly ideally. >> If not ready/built-in solution then perhaps a best technique you >> recommend/use?

On Fri, Apr 07, 2023 at 19:42:11 +0200, lejeczek wrote: > > > On 06/04/2023 16:12, Peter Krempa wrote: > > On Thu, Apr 06, 2023 at 15:22:10 +0200, lejeczek wrote: > > > Hi guys. > > > > > > Is there a solution, perhaps a function of libvirt, to backup guest's > > > storage and encrypt the resulting image file? > > > On-the-fly

Hi guys. I've have a guest and that guest differs from all other guest by: ? <os> ??? <type arch='x86_64' machine='pc-q35-rhel9.0.0'>hvm</type> ??? <loader readonly='yes' secure='yes' type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader> <nvram>/var/lib/libvirt/qemu/nvram/ubusrv1_VARS.fd</nvram>

On Thu, Dec 20, 2018 at 04:57:41PM -0500, John Ferlan wrote: > > > On 12/20/18 11:56 AM, lejeczek wrote: > > hi everyone, > > > > do we get to encrypt lvm pools in/with libvirt? > > The pool or the volumes? > > > > > I'm on Centos 7.x but see mention of it, not even on the net. > > I have no idea which libvirt version is in Centos

On 02/17/2020 05:03 AM, lejeczek via CentOS wrote: > On 16/02/2020 15:18, H wrote: >> I wonder if it is possible to set up an encrypted "file container" on a CentOS VPS? I am the root user of the VPS but the hosting company also has access to the VPS and thus all files. Is it possible to create a LUKS-container on the VPS and those files only be accessible by me? IOW, most of

On 23/02/2020 19:06, H wrote: > On 02/17/2020 05:03 AM, lejeczek via CentOS wrote: >> On 16/02/2020 15:18, H wrote: >>> I wonder if it is possible to set up an encrypted "file container" on a CentOS VPS? I am the root user of the VPS but the hosting company also has access to the VPS and thus all files. Is it possible to create a LUKS-container on the VPS and those

On Fri, Apr 14, 2023 at 13:39:17 +0200, lejeczek wrote: > > > On 11/04/2023 09:13, Peter Krempa wrote: > > On Sat, Apr 08, 2023 at 11:25:18 +0200, lejeczek wrote: > > > Hi guys. > > > > > > I've have a guest and that guest differs from all other guest by: > > > > > > ? <os> > > > ??? <type arch='x86_64'

On 12/20/18 11:56 AM, lejeczek wrote: > hi everyone, > > do we get to encrypt lvm pools in/with libvirt? The pool or the volumes? > > I'm on Centos 7.x but see mention of it, not even on the net. I have no idea which libvirt version is in Centos versions, but support was added in libvirt 3.9.0 (Nov. 2017) via commit 2518fd3b6a with a followup commit 9b837963 for libvirt

I'm sorry, but grep -i crypt /var/log/anaconda/anaconda.program.log returns nothing. But I have got an entry in /etc/crypttab. I only found this with grep -i luks /var/log/anaconda/anaconda.*: /var/log/anaconda/anaconda.storage.log:20:47:55,959 DEBUG blivet: LUKS.__init__: /var/log/anaconda/anaconda.storage.log:20:49:25,009 DEBUG storage.ui: LUKS.__init__:

Hi， I used 'virsh snapshot-create' create an encrypted external snapshot, when I try to use 'qemu-img check' top file, found no entrance to pass backing-file's secret-id 1、Version centos-release-8.2-2.2004.0.1.el8.x86_64 libvirt.x86_64 6.0.0-17.el8 qemu-kvm.x86_64

Bump? Nobody using mail-crypt right now (with user keys encrypted by user's password to work transparently from, say, Thunderbird) who could share their config? On 12/02/2020 11:54 pm, Alex Knowles wrote: > Hi all, > > I just joined the list. I've read through the mail-crypt plugin docs > here https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/ > >

Hi all, I just joined the list. I've read through the mail-crypt plugin docs here https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/ I'm still unclear (I'm not an expert) about the following: Is it possible to obtain on-the-fly encrypted storage using the user's password without the password being stored on the server? Basically a zero-knowledge solution.

On Thu, Mar 5, 2015 at 10:25 PM, Tim <lists at kiuni.de> wrote: > Hi Chris, > > thanks for your answer. > > It is the first time I decided to encrypt my lvm. I choosed to encrypt the > volume group, not every logical volume itself, because in case of doing lvm > snapshots in that group they will be encrypted too? Yes, anything that's COW'd is also encrypted in

On 2020-02-24 15:57, H wrote: > On 02/24/2020 12:42 PM, Roberto Ragusa wrote: >> On 2020-02-24 14:37, lejeczek via CentOS wrote: >>> >>> >>> On 24/02/2020 10:26, Roberto Ragusa wrote: >>>> On 2020-02-24 10:51, lejeczek via CentOS wrote: >>>>> g) remember!! still at least (depending how you mount it) >>>>> the

I wonder if it is possible to set up an encrypted "file container" on a CentOS VPS? I am the root user of the VPS but the hosting company also has access to the VPS and thus all files. Is it possible to create a LUKS-container on the VPS and those files only be accessible by me? IOW, most of the file system on the VPS would be regular file system but the container could be used by me as

hi everyone, do we get to encrypt lvm pools in/with libvirt? I'm on Centos 7.x but see mention of it, not even on the net. Or in other words - can guests(lxc I'm thinking of) run off ecrypted lvm where at least the part when dev gets luksOpened is taken care of by libvirt? many thanks, L.

it's been a while since i've played with filesystem encryption so, on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered to be the state of the art WRT encryption? i remember other solutions like loop-aes and others, but what's considered the gold standard these days? rday -- ======================================================================== Robert P. J. Day

From RHEL docs: "The default implementation of LUKS in Red Hat Enterprise Linux is AES 128 with a SHA256 hashing. Ciphers that are available are: AES - Advanced Encryption Standard - FIPS PUB 197 Twofish (A 128-bit Block Cipher) Serpent cast5 - RFC 2144 cast6 - RFC 2612" My question is: What will be the performance impact on my Celeron 1.73 GHz CPU and/or hdd

On 02/24/2020 12:42 PM, Roberto Ragusa wrote: > On 2020-02-24 14:37, lejeczek via CentOS wrote: >> >> >> On 24/02/2020 10:26, Roberto Ragusa wrote: >>> On 2020-02-24 10:51, lejeczek via CentOS wrote: >>>> g) remember!! still at least (depending how you mount it) >>>> the 'root' will have access to that data while mounted,

On 02/24/2020 05:02 PM, Valeri Galtsev wrote: > > > On 2020-02-24 15:57, H wrote: >> On 02/24/2020 12:42 PM, Roberto Ragusa wrote: >>> On 2020-02-24 14:37, lejeczek via CentOS wrote: >>>> >>>> >>>> On 24/02/2020 10:26, Roberto Ragusa wrote: >>>>> On 2020-02-24 10:51, lejeczek via CentOS wrote: >>>>>> g)