Is it possible to "convert" an encrypted system to LVM
From what I understand after reading this article in the wiki LVM is an underlying layer below the partitions that you usually work with. Basically a structure on the HDD on top of which you have your partitions and file systems.
Now, before asking my – hopefully not embarrassingly stupid – question, I should probably describe my situation:
I have two HDDs here, one of which is currently in use. Both are the same model and could be used interchangeable, they contain different data though.
· The first one, currently in use, contains /boot and three encrypted (via dm_crypt) partitions which each contain one file system (2* ext4, 1* reiserfs)
· The second one, currently lying around and only being mounted occasionally, contains one big ntfs partition encrypted with TrueCrypt
I have never worked with LVM but I would like to at least broaden my knowledge with experience so I can – when I set up my next system some time – make better informed decisions. Ideally I would "convert" my current system into something that's better to use and needs less different solutions patched together than it does now.
What I would like to have is a system with both hard drives (probably more added later) to be ready after boot with my current partitions (/boot, /, /var and /home) mounted while the second, currently only sporadically used HDD, is "integrated" in /home. And all of that (except /boot of course) should remain encrypted.
I know that I have to format the NTFS drive and as it should be part of /home – which currently is an encrypted (via dm_crypt) ext4 partition – it probably needs to be ext4. I expect it to be problematic to have a Logical Volume spread across one dm_crypt-encrypted drive and one TrueCrypted though I am not entirely clear on whether the encryption would be on top of the LVM volumes or vice versa. Anyway I assume I have to decrypt the TrueCrypt drive and encrypt it again with dm_crypt. Unless that would be dumb and you suggest something different?
The second drive (NTFS wrapped in TrueCrypt) can be completely wiped if necessary (most probably the easiest approach).
Apart from "Is that possible and/or a good idea or would you suggest not to switch to LVM and do something different (integrate the second drive in my dm_crypted system maybe?)?" my question is: "How would I tackle this problem; what would be the starting point and how could I make sure I don't accidentally erase all the data on /boot, /, /var and /home as I would like to keep my current system?"
I hope it's somehow understandable what I'm trying to do, if not please do ask.
Last edited by venehan_snakes (2011-08-30 14:52:29)
I get the impression you want to do this without backing up your data - if that is the case, you are certifiably crazy and should seek help immediately.
Bet let's assume you're not crazy, and have backed up everything. The next step is to go to the LVM section of the wiki's LUKS page, and implement one of the solutions there.
Similar Messages
-
[SOLVED] Encrypted install without LVM
I always installed my encrypted systems without LVM, on Debian, Ubuntu and openSUSE. Basically my partition scheme is:
/boot
/swap
/home
I've been trying to run the system for 2 days without success.
After install+reboot, a password is asked for the "main" disk (configured on /etc/default/grub) and then everything hangs. I press Ctrl+C then after being asked for the root password (and typing it) I can log in and manually mount the other partitions, but no DE can load.
I'll put my install scheme so you can understand better, and, if requested, I can upload my conf files such as grub, mkinitcpio etc.
Install process:
# loadkeys br-abnt2
# modprobe dm-crypt
# cfdisk
After creating all partitions:
# cryptsetup -c twofish-xts-plain64 -y -s 512 luksFormat /dev/sdaX
# cryptsetup luksOpen /dev/sdaX cr_sdaX
# mkfs.ext4 /dev/mapper/cr_sdaX
# mkswap /dev/mapper/cr_sda3
# swapon /dev/mapper/cr_sda3
# mkfs.ext4 /dev/sda1
# mount /dev/mapper/cr_sda2 /mnt
# mkdir /mnt/boot
# mkdir /mnt/home
# mount /dev/sda1 /mnt/boot
# mount /dev/mapper/cr_sda4 /mnt/home
# nano /etc/pacman.d/mirrorlist
# pacstrap /mnt base base-devel
# genfstab -L -p /mnt >> /mnt/etc/fstab
# arch-chroot /mnt
# nano /etc/locale.gen (same locales as the 1st time)
# locale-gen
# nano /etc/locale.conf
# nano /etc/vconsole.conf (KEYMAP=br-abnt2)
# ln -s /usr/share/zoneinfo/Brazil/East /etc/localtime
# mkinitcpio -p linux
# nano /etc/mkinitcpio.conf
Now I edit '/etc/mkinitcpio.conf' and add 'keymap' and 'encrypt' to the HOOKS line, right before 'filesystems' and then rebuild the image.
# echo junior > /etc/hostname
# passwd
# pacman -S grub
# grub-install /dev/sda
Now, in '/etc/default/grub' I edit the line 'GRUB_CMDLINE_LINUX=”"' to 'GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda2:main”' then I run:
# grub-mkconfig -o /boot/grub/grub.cfg
#exit
#umount -R /mnt
#reboot
Now, after install, the system asks me for the /dev/sda2 password, it says it's clean, than hangs. I press Ctrl+C, it says I can continue/rescue/etc, I type my root password and then mount the other partitions.
Funny thing is that it can't mount /home and after I mount it manually it tries to continue to boot, but hangs again. Then again I press Ctrl+C and I log in as root. I also isntalled xorg/nvidia/xfce to see if it loads after manually mounting the partitions but no success, I have to start it manually.
So, if any of you successfuly installed Arch with an encrypted FS w/o a LVM = PLEASE!! HELP!
Regards.
Last edited by Amarildo (2013-09-25 17:00:25)mr.MikyMaus wrote:Do you have "root=/dev/mapper/cr_sda2" set as a kernel boot parameter?
Yes, although I think the ro option should be changed to rw:
GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda2:cryptroot root=/dev/mapper/cryptroot ro"
I got to the point where it asks me for the / password and then for /home too, but it hangs there, home is not being mounted nor swap. I'm on the system now but as root and with xfce.
For some reason I can't upload my files so I post them here.
PS: The GRUB file (/etc/default/grub) was not posted entirely since I only edited the last line of what's being pasted here.
GRUB
GRUB_DEFAULT=0
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="Arch"
GRUB_CMDLINE_LINUX_DEFAULT="quiet"
GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda2:cryptroot root=/dev/mapper/cryptroot rw"
mkinitcpio.conf
# vim:set ft=sh
# MODULES
# The following modules are loaded before any boot hooks are
# run. Advanced users may wish to specify all system modules
# in this array. For instance:
# MODULES="piix ide_disk reiserfs"
MODULES="dm_mod ext4"
# BINARIES
# This setting includes any additional binaries a given user may
# wish into the CPIO image. This is run last, so it may be used to
# override the actual binaries included by a given hook
# BINARIES are dependency parsed, so you may safely ignore libraries
BINARIES=""
# FILES
# This setting is similar to BINARIES above, however, files are added
# as-is and are not parsed in any way. This is useful for config files.
FILES=""
# HOOKS
# This is the most important setting in this file. The HOOKS control the
# modules and scripts added to the image, and what happens at boot time.
# Order is important, and it is recommended that you do not change the
# order in which HOOKS are added. Run 'mkinitcpio -H <hook name>' for
# help on a given hook.
# 'base' is _required_ unless you know precisely what you are doing.
# 'udev' is _required_ in order to automatically load modules
# 'filesystems' is _required_ unless you specify your fs modules in MODULES
# Examples:
## This setup specifies all modules in the MODULES setting above.
## No raid, lvm2, or encrypted root is needed.
# HOOKS="base"
## This setup will autodetect all modules for your system and should
## work as a sane default
# HOOKS="base udev autodetect block filesystems"
## This setup will generate a 'full' image which supports most systems.
## No autodetection is done.
# HOOKS="base udev block filesystems"
## This setup assembles a pata mdadm array with an encrypted root FS.
## Note: See 'mkinitcpio -H mdadm' for more information on raid devices.
# HOOKS="base udev block mdadm encrypt filesystems"
## This setup loads an lvm2 volume group on a usb device.
# HOOKS="base udev block lvm2 filesystems"
## NOTE: If you have /usr on a separate partition, you MUST include the
# usr, fsck and shutdown hooks.
HOOKS="base udev autodetect modconf block keymap encrypt filesystems keyboard fsck"
# COMPRESSION
# Use this to compress the initramfs image. By default, gzip compression
# is used. Use 'cat' to create an uncompressed image.
#COMPRESSION="gzip"
#COMPRESSION="bzip2"
#COMPRESSION="lzma"
#COMPRESSION="xz"
#COMPRESSION="lzop"
# COMPRESSION_OPTIONS
# Additional options for the compressor
#COMPRESSION_OPTIONS=""
crypttab
# crypttab: mappings for encrypted partitions
# Each mapped device will be created in /dev/mapper, so your /etc/fstab
# should use the /dev/mapper/<name> paths for encrypted devices.
# The Arch specific syntax has been deprecated, see crypttab(5) for the
# new supported syntax.
# NOTE: Do not list your root (/) partition here, it must be set up
# beforehand by the initramfs (/etc/mkinitcpio.conf).
# <name> <device> <password> <options>
home_crypt /dev/mapper/cr_sda4 none luks,allow-discards
# data1 /dev/hda3 /etc/mypassword2
# data2 /dev/hda5 /etc/cryptfs.key
swap_crypt /dev/sda3 /dev/urandom swap,cipher=aes-cbc-essiv:sha256,size=256
# vol /dev/hdb7 none
EDIT: Updated my files, but still /home is not being monted
[root@junior ~]# cryptsetup status /dev/mapper/cryptroot
/dev/mapper/cryptroot is active and is in use.
type: LUKS1
cipher: twofish-xts-plain64
keysize: 512 bits
device: /dev/sda2
offset: 4101 sectors
size: 125849109 sectors
mode: read/write
[root@junior ~]# cryptsetup status /dev/mapper/cr_sda4
/dev/mapper/cr_sda4 is inactive.
Last edited by Amarildo (2013-09-25 12:14:38) -
Its possible to convert Apple script to Java script
Hi,
Please Help me anyone to do that script.
its possible to convert below mentioned Apple script to Java Script.
Thanks in advance.
Help me......!
-yajiv
Code:
tell me to addImageLabels()
on addImageLabels()
tell application "Adobe InDesign CS5"
set numberAdded to 0
activate
set enable redraw of script preferences to true
set currentFonts to (get name of every font)
if currentFonts does not contain fontname then
display dialog "The font \"" & fontname & "\" is not active on your system." buttons {"Continue anyway", "Cancel"} default button 2
end if
tell document 1
-- get a list of unique page IDs in this document
set allpageids to my getPageIds()
repeat with p from 1 to (length of allpageids)
set pgid to item p of allpageids
-- loop through these, getting a list of unique page item IDs to inspect
tell page id pgid
set pageitems to (get id of every page item)
repeat with i from 1 to (length of pageitems)
set pid to item i of pageitems
tell page item id pid
try
-- certain boxes will fail to yield a content type, whatever
if content type is graphic type then
set c to class
set i to id
-- get the name of the link, i.e. the filename, subject to labelFormat (full name, first six chars, etc.)
set gn to my getImageName(pgid, c, i)
if (gn is not "Empty") and (gn is not "") then
set b to visible bounds
set h to (item 3 of b) - (item 1 of b)
set newtop to (item 1 of b) + (h / 2)
set item 1 of b to newtop
set w to (item 4 of b) - (item 2 of b)
if w < minwidth then
set item 4 of b to ((item 4 of b) + 0.2)
set item 2 of b to ((item 2 of b) - 0.2)
end if
set l to (make new text frame at beginning of page id pgid with properties {visible bounds:b, fill color:fillcolor, contents:gn, label:"imagelabel"})
tell l
tell paragraph 1
set justification to center align
try
set applied font to fontname
end try
set point size to fontsize
set fill color to textcolor
end tell
set inset spacing of text frame preferences to ((insetspacing as string) & " in") as string
fit given frame to content
set numberAdded to numberAdded + 1
end tell
end if
end if
end try
end tell
end repeat
end tell
end repeat -- allpageids
end tell -- document 1
display dialog "Added " & numberAdded & " labels." buttons {okButton} default button 1 giving up after 10 with title scriptName
end tell -- InDesign
end addImageLabels
on getPageIds()
tell application "Adobe InDesign CS5"
tell document 1
tell master spread 1
set masterpageids to (get id of every page)
end tell
set docpageids to (get id of every page)
end tell
end tell
return masterpageids & docpageids
end getPageIds
on getImageName(int1, cla1, int2)
tell application "Adobe InDesign CS5"
tell document 1
tell page id int1
if cla1 is rectangle then
set imagename to (name of item link of graphic 1 of rectangle id int2)
else if cla1 is polygon then
set imagename to (name of item link of graphic 1 of polygon id int2)
else
return "Unknown"
end if
try
if (labelformat is "First six characters") then
return (characters 1 thru 6 of imagename) as string
else if (labelformat is "Base name of linked file") then
set op to offset of "." in imagename
return (characters 1 thru (op - 1)) of imagename as string
else
return imagename
end if
on error
return "Empty"
end try
end tell
end tell
end tell
end getImageNameYajiv:
I realize English is probably not your first language, but you are not really making sense. Perhaps you could use more words and write in more detail.
It seems you already have your script in AppleScript. Why do you need to convert it to JavaScript?
It's going to be inconvenient at best and probably not worth anyone's time.
Just use the AppleScript. -
Possible to convert autonomous AP to LWAPP via CLI?
Hi,
Probably a silly question but was wondering why it is not possible to convert an autonomous AP to LWAPP by using CLI commands?
For example we have over 300 access points to convert and thought about using Linux to automate the task but seems there is only a windows conversion utility.
Cheers,
- TrevorHi Trevor,
You can convert AP to LWAP using CLI but this is entirely dependent on the model of AP you're dealing with. 1230, for example, requires the conversion tool. 1130, 1240 and 1250 can be converted using CLI. Here it is ...
Requirements:
⢠Image file (The recovery file has the prefix ârcvâ in the image name, such as c1200-rcvk9w7-tar.122-15.JA.tar);
⢠AP is connected to the Wireless LAN Controller; and
⢠AP can ping the TFTP server where the image is located.
Procedure
1. Copy the recovery file to the AP using the following command:
archive tar /x tftp:/// flash:
2. Let the AP boot on this image:
boot system flash://.bin
3. Reboot the AP.
OPTIONAL
⢠DO NOT ALLOW THE AP TO JOIN THE WIRELESS LAN CONTROLLER IN ORDER TO USE THE OPTIONAL COMMANDS BELOW.
⢠IF POSSIBLE, type the following commands:
ï¾ clear lwapp private-config (This will bring the AP to factory default.);
ï¾ clear lwapp ap ip address
ï¾ clear lwapp ap hostname
ï¾ clear lwapp ap controller ip address
4. Let the AP connect to the Wireless LAN controller.
OPTIONAL
If an AP refuses to join the Wireless LAN Controller, type the following command from the AP:
lwapp ap controller ip address -
Est il possible de convertir le clavier qwerty en azerty d'un MacBook
est il possible de convertir le clavier qwerty en azerty d'un MacBook
Go to the "Keyboard" system preferences
Select the "Input Sources" tab
Click the "plus" button in the column to the left
Select your language (i.e., French)
Choose the "French" layout
When you do this, you will see the keyboard layout underneath your selection. Ensure it is the proper AZERTY layout for your needs, then click the "Add" button. When finished, ensure this new layout is the one selected, and the system should now use AZERTY.
One additional thing you can do is check the "Show Input menu in menu bar" option in the Input Sources tab, which will give you a small system menu (to the left of the menu bar) that will allow you to select different keyboard layouts and see which one is currently active. -
Is it possible to convert an app from 12c to 11g?
I am using both 11.1.2.4 and 12.1.2.0.
If I have an app built with 12.1.2.0, which does not include any 12c specific features, is it possible to convert it to 11.1.2.4?
I am asking because I have a Development environment that is 12c, but a Production environment that is 11g and I am not sure we will be able to upgrade the Production environment
Thanks in advance..It's possible but not an easy task. As 12c uses newer stuff you have to test everything with great care. You might find some things you have to rebuild add they won't work in 11.1.2.4.0 (e.g. components which are only available in 12c. If you read the what's new doc for 12c and you find something you have used, prepare to rebuild this part.
First thing to try ids to open the project in 11.1.2.4.0 and see if you can compile and run the app.
Timo -
Is it possible to convert text captions to Smart Shapes?
Hello,
I have a collegue that is using Cp 5 to record software simulations which then need to be brought into Cp6. The problem is that our standards (for software simulations) employ Smart Shape call outs (not the Cp 5.5 and earlier text captions).
Is it possible to convert these text captions into our themed Smart Shapes either automatically inside Captivate 6 or by modifying the content within the CPTx file?
Thank you,
ShawnHello Lilybiri,
As always you are awesome! :-)
>I don't believe an automatic switch will be possible, because smart shapes are totally different objects.
I understand because there are a huge variety of shapes in either format. But I suspect that it should be easy to convert a text caption from any style to one specified smart shape style.
Actually, I am asking before the simulations get started. So nothing has been done yet. I am unsure what you are suggesting I should do in the preferences under Cp 5.5. Are you suggesting that there is a way to convert 'some format' of text callouts, in a Cp5.5 demonstration simulation, to Smart Shapes in Cp6?
>but since you already have created the simulations, it has to be done manually. Hoping for you that
>someone has a bright idea, but I do not see one immediately.
For anyone else in this situation, it would be handy to have a solution (rather than painstakingly convert each manually).
I am wondering if this might be a relatively easy search/replace within one of the xml files within the CPTx file. I'm going to look at this tonight.
Thanks for your assist. -
I am using a mac mini 2011 an 3gs i phone 2010 macbook white 2008 and a new 2013 apple tv box. When i check info on the cloud I get 'upgrade your operating system to the latest. My question is is it possible to use the icloud system without an upgrade
iCloud requires OS X 10.7.2.
-
Is it possible to convert PDF file into HTML
Dear friends
Is it possible to convert PDF file into HTML. I have few hundread PDF files i like to convert this files into HTML. I hope it can be done through Java but i don't know how to start this coding. anybody can give me a brief idea to go ahead.Why do you want to do this yourself? I quick search on Google showed several utilities to do this, some freeware, some commercial.
-
Is it possible to convert to an AIFF file in itunes 10 and beyond, and if so what is the procedure?
Hello. Is it possible to convert to an AIFF file in itunes 10 and beyond, and if so what is the procedure?
I use FCP7 and often have a sound loop or the like that I need in AIFF format, I normally use itunes to do the conversion, but have heard that version 10 no longer performs this task...?
Thx for the help!
MBP 2.6 GHz Intel Core 2 Duo - Mac OS X 10.6.7 - itunes 9.2.1 (5)Doolittle wrote:
I can't find convert to aiff as an option in itunes 10.
It still works the same as in past releases. Go to Edit > Preferences > Import Settings, and set "Import Using" to "AIFF Encoder," and then the option will be available. Consult this document for details:
http://support.apple.com/kb/HT1550 -
BI 7.0, BDLS is not converting all logical systems for datasources
Hello all,
We have refreshed an ECC system, and during the post steps in BI, we were running into issues.
We've ran BDLS to convert the logical system from ECCCLNTXXX to ECCCLNTYYY, but it's was not converting for several datasources.
One in particular was causing several problems, and terminating the conversion.
0FC_CI_01. It is still hanging on to the old logical system. BDLS terminates with the following information:
Short text:
Active version of emulated 3.x DataSource 0FC_CI_01 cannot...
Basically, the exact symptom of Note 936644.
Eventually, through a series of trials, we discovered we could assign non-active sourcesystem/logical system combinations to the objects. As a result, we deleted the source systems entirely, ran BDLS to the ECCCLNTYYY, then recreated the sources.
This finally worked. What I need now is a root cause. Why would BI refuse to change the logical system of an object to an active one, but have no problem with an inactive?Mike,
After running BDLS, you need to replicate the source system in BW, change the contents of the target host and fields for all R/3 and Data Mart(note 184754). Update the target BW system name in table T000 using SM30. Change logical system name in all BW tables using BDLS (note 325525)
Refer to the below doc for detail. Also refer to note 886102.
[http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/805eefcd-5428-2d10-c0ab-dc27a95b2c81?quicklink=index&overridelayout=true]
Below note talks about similar issue.
How to change all infosources to the new source system automatically
Hope this helps. -
Is it possible to convert *.doc to *.rtf in a java program?
Hi :-)
My challenge is to develop a web-app in ADF Faces. Now i verify some technologies to store mailmerge letters in an easy way. The user of my web-app should upload a MS Word mailmerge document and a csv data source file. My web-app must thereupon convert this two files to a pdf per csv-row and store it to a ftp.
I have build a demo using the open office API. But now i want to try the same by using apache POI and FOP. I can merge the doc files with POI and i can create PDF with FOP.
My problem is, that POI cant convert to a rtf file and FOP uses an rtf file to create a pdf. I dont know, if its possible to convert a doc file to a rtf file. If its possible, is there an API, which will help me out?
Regards
Majo
btw...I am not sure, if its the right forum for my question :-/HeHe, no sorry. The binary file is the same, because Windows bind doc and rtf with MS Word, it opens the file, which you have renamed to *.rtf in MS Word. But as a doc document, not as a rtf file ;-)
And i dont want to open the rtf file in MS Word. I want to process the rtf file in java.
Thanks
Majo -
I have acrobat 11 standard is it possible to convert pdf files to word files ?
I have acrobat 11 standard is it possible to convert pdf files to word files ? or is it just possible in the Pro version.
It sounds to me like you're using Reader, not Acrobat. Make sure you open
the PDF file in Acrobat, and then go to File - Save As Other - Microsoft
Word.
On Thu, Mar 12, 2015 at 2:55 PM, nickk23435928 <[email protected]> -
BPM--cannot convert sender logical system to ALE
Hi
My Scenario is file-bpm-idoc.. Where i am getting an error saying "cannot convert sender logical system to ALE" for the BPM.
i tried entering the logical system for the BPM in adapter specific attributes but it says logical system is already being used by some other service..
So i tried header mapping in receiver agreement now the messages are failed at the intital stage before entering the BPM only only saying cannnot find recvr agreement..
My sender system BS_EXT_100
BPM IP_calldoc
Recvr system BS_EDCR/3_200
i did the header mapping for recvr agreement of BPM by selecting the sender service and entering "BS_EXT_100"
Where am i going wrong...solved it myself.. Thanks
-
Possible to connect multiple R3/Systems to one XI?
Hi,
is it possible to connect mutiple R3-Systems to one XI?
How does it work?
Regards
StefanStefan,
You can certainly connect multiple R/3 systems to one XI.
1. If your R/3 system release is 4.7 then use point 8 from the configuration guide. (RZ70 transaction collects the system data and creates a technical system in the SLD)
2. If your R/3 system release is < 4.7 (means 46c or 46B, 40B) then you should create a technical system in the SLD.
3. For any other SAP product with ABAP stack (including R/3 47 system), you should check the SAP_BASIS release if it is 6.20 you should apply XI Add-on to use XI Proxy adapter. For SAP_BASIS < 620 you cannot have XI Proxy adapter. For SAP_BASIS > 6.20 you do not need any add-ons (from this point onwards it is NetWeaver)
To find SAP_BASIS release -> SPAM Transaction -> Click on Package Level.
Then create a business systems for each one of them and import them into the Int. Directory when needed.
Regards
Shravan
Maybe you are looking for
-
i'm creating a pop-up menu with a link that will open a page at an anchor, how do i write the link..
-
Print aspx form with data in Pdf in C#
Hi i am using visual studio 2013.i have one registration form which is inherited from master page and in this page i am using ajax control toolkit also.i want this page wit data in PDF format.it means i am trying to print this page with data in pdf f
-
Where should I save the playlists file
In what specific file on my computer should i save my iTunes personal playlists files
-
Using ThreadLocal with WebLogic App Server
With weblogic thread pooling, When I use threadlocal variables in my application, how does it work as far as cleaning those variables after the request is completed. Thanks in advance.
-
Problem updating firefox with old avg virus protector
hi i have tried to update to your newer version of firefox ( excisting one running fine ) but when i try to i get a warning saying will not run without deleting my avg protection and is not compatable ( this being an older version too as i run on win