-
|
If I already selected LVM with encryption during the Debian install? |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
|
The answer is in the question. Proxmox by default uses a separate partition/drive for data which isn't protected by LUKS. If you decide to just use a big root partition, you're right this wouldn't be needed. But if you use unencrypted disks for data, you can "extend" your encryption chain of trust by doing file based encryption on them with the key on the proxmox root drive with restrictive permissions. |
Beta Was this translation helpful? Give feedback.
-
|
Ah, thanks. I plan to use the rest of the drive with the OS as local-over, then create another storage pool from 2 NVMEs (that are outside of the RAID the OS sits on). Should I go through Step 6 first before Step 5? |
Beta Was this translation helpful? Give feedback.
-
|
I'd still do the written order. Step 6 is just an example way of protecting the data disk, but you can definitely use other methods. |
Beta Was this translation helpful? Give feedback.
The answer is in the question. Proxmox by default uses a separate partition/drive for data which isn't protected by LUKS. If you decide to just use a big root partition, you're right this wouldn't be needed. But if you use unencrypted disks for data, you can "extend" your encryption chain of trust by doing file based encryption on them with the key on the proxmox root drive with restrictive permissions.