[TriLUG] Encryption on linux

[Michael Ansel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Paul G. Szabady wrote:
> Greetings,
> 
> I need to encrypt (3DES) a fairly large (~1.3TB) NFS mounted directory 
> to a "local disk" to send offsite.  This will be a one time process. 
> I'm considering the use of rsyncrypto.  Does anyone have any experience 
> doing this?  If so, I'm looking for recommendations on tool(s) to use 
> and any estimate on how long it might take.  I know there are a lot of 
> factors involved, but if you could tell give me a rough idea and what 
> your setup was (ie: NetApp over NFS, direct attached drive shelf with 
> 1GB fiber channel, etc).
> 
> Thanks!
> 
> --
> Paul
> @ Thy Service

DISCLAIMER: I've never worked with a dataset that large before.
That said, I've never had a problem using LUKS encrypted external hard
drives. By running full drive encryption, you get the exact same
interface you would for any other drive (so you can run rsync or
whatever) and put whatever file system you want on top of it (it serves
out a block device). Admittedly, you would probably want to have a
RAID-backed block device for that because IIRC they don't make 1.3TB
drives yet. :P I don't remember the exact command to configure the
drive, but dm-crypt has pretty good man pages and their online docs are
even better (they walk you through the whole process). Hope that is a
workable solution!

Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iQEVAwUBSBDgwXlxmnp6j2qxAQJniQgAv/47BmFMlyAR7cb7UUBS/8rJ8OIW2z1U
Vkh3igi9LSLdiE3BXtnt9L7o+pvKqRv2KuqrJp4XvjPeWd8uMNX1nmeIa3wsWQFG
SJDsCkgZy99ZWVFR3PdwIDe/zgAvL2Im5FEHsPqLK8GnMuGLFdwvle250y747tw2
Siu6E7/WqYUByhG3KTil4IlnEPOdvEVglp0fIy/GlsUxruoNZKRWqSrZQOXr0tfv
HRbt/5ZZcBwF3P18S0QE8tlB2+ks5SkvJIIvqK1hkEExqD2xIjJ2u7Vu8LvQk50R
qdsQx7Z7aopV01QJtdlIDl53rxlx87vXXKUYEX0pO0+mZLC4ttRJ2A==
=gTWr
-----END PGP SIGNATURE-----