user mounted encrypted logical volume

[jetojedno]

Hi,

I can see many posts which explain howto encrypt a whole physical partition or disk, but I can't see one which sets out the steps to encrypt a LV within LVM.

What I want is, post-boot & post-login, to decrypt & mount an LV, use the contents, then umount it before logging out. Auto-umount would be nice, and I think I can achieve that by mounting it into the /run/user/????/ directory, but that's a later thing.

I think what I need to do:
1. create LV
2. use cryptsetup to encrypt the LV
3. add entries to /etc/fstab (and where else?) to be able to simply mount & umount the LV

and

4. remember to umount it when I've finished / before logging out.

Can you add any (correct) details or point me towards a good how-to?

Thanks
David

[nrickert]

I'm not completely clear on what you are wanting to do.

Is this an existing LVM? In that case, yes, you must create the new volume within that LVM, encrypt it, format it, then mount it as needed. You would probably want an entry in "/etc/fstab" and maybe in "/etc/crypttab".

[jetojedno]

Thanks. Just finishing the reading about the various tools / files you mentioned. Experimenting tomorrow before trying "properly" Monday.

David

[jetojedno]

Thanks again. Having read the man pages and guides, I cheated by using YaST2 partitioner to create the encrypted volume and then edited mount points etc.

Worked first time!

[dcurtisfra]

@jetojedno:

The openSUSE documentation is here – <https://doc.opensuse.org/documentati...-cryptofs.html>.