Differences

This shows you the differences between two versions of the page.

--- deb9:luks [2020/06/23 13:36] – [Increase size of Raid Disk Array with LVM and LUKS] Bernard Condrau
+++ deb9:luks [2025/07/21 22:35] (current) – [Increase size of Raid Disk Array with LVM and LUKS] Bernard Condrau
@@ Line 19: / Line 19: @@
   - Mount Encrypted Partition<code>sudo mount /dev/mapper/<vg name>-<lv name>_crypt /mountpoint</code>
   - If you need a directory tree to be copied from a backup location back to the newly encrypted drive, do it with rsync<code>rsync -av --progress --exclude '/home/user/VirtualBox VMs' /home/user /mountpoint/</code>
+  - Or, for an entire BackupPC structure<code>rsync -avxHAWX --info=progress2 /backup/ /new-backup/</code>
+  - Verify the structure between source and destination<code>rsync -avcn /backup/ /new-backup/</code>
 ===== Increase size of Raid Disk Array with LVM and LUKS =====
 These steps have to be taken to increase a Raid Disk Array with the following configuration: RAID -> LVM -> LUKS -> ext4.
-  - Add size of Raid explained in [[deb9:mdadm|RAID - mdadm (Software RAID)]]
+  - Increase size of Raid explained in [[deb9:mdadm|RAID - mdadm (Software RAID)]]
-  - Unmount the file system<code>sudo umount /backup</code>
+  - Unmount the file system:<code>sudo umount /backup</code>
-  - Close LUKS<code>cryptsetup luksClose vg_backup-lv_backup_crypt</code>
+  - Close LUKS:<code>cryptsetup luksClose vg_backup-lv_backup_crypt</code>
-  - Resize the physical volume to consume all free space in LVM<code>pvresize /dev/md3</code>
+  - Resize the physical volume to consume all free space in LVM:<code>pvresize /dev/md3</code>
-  - Resize the logical volume to consume all free space in LVM<code>lvresize -l+100%FREE /dev/vg_backup/lv_backup</code>
+  - Resize the logical volume to consume all free space in LVM:<code>lvresize -l+100%FREE /dev/vg_backup/lv_backup</code>
-  - Open LUKS and enter the volume password<code>cryptsetup luksOpen /dev/mapper/vg_backup-lv_backup vg_backup-lv_backup_crypt</code>
+  - Open LUKS and enter the volume password:<code>cryptsetup luksOpen /dev/mapper/vg_backup-lv_backup vg_backup-lv_backup_crypt</code>
-  - Check the filesystem<code>e2fsck -f /dev/mapper/vg_backup-lv_backup_crypt</code>
+  - Check the filesystem:<code>e2fsck -f /dev/mapper/vg_backup-lv_backup_crypt</code>
-  - Extend the filesystem to consume all free space<code>resize2fs /dev/mapper/vg_backup-lv_backup_crypt</code>
+  - Extend the filesystem to consume all free space:<code>resize2fs /dev/mapper/vg_backup-lv_backup_crypt</code>
-  - Mount file system<code>mount /dev/mapper/vg_backup-lv_backup_crypt /backup</code>
+  - Mount file system:<code>mount /dev/mapper/vg_backup-lv_backup_crypt /backup</code>
+  * You could do an online resize by avoiding to unmount the file system and closing LUKS, but I find this approach safer. If you decide to do an online resize, skip steps 2 and 3, and instead of step 6 (open LUKS) do a crypt resize:<code>cryptsetup resize vg_backup-lv_backup_crypt</code>.
+===== Restore LUKS header =====
+  sudo cryptsetup luksHeaderBackup /dev/mapper/vg_data2-lv_home --header-backup-file /path/to/backup/header.img
+  sudo cryptsetup luksErase /dev/sdb1
+  sudo cryptsetup luksHeaderRestore /dev/sdb1 --header-backup-file /path/to/backup/header.img
+https://superuser.com/questions/1596599/is-it-safe-to-move-a-luks-encrypted-partition-to-another-system-and-be-able-to-u
+===== Links =====
+  * [[https://bobcares.com/blog/raid-resync/]]
+  * [[https://www.ducea.com/2009/03/08/mdadm-cheat-sheet/]]
+  * [[https://unix.stackexchange.com/questions/546218/debian-full-disk-encryption-does-debian-installer-use-luks-1-or-2]]
+  * [[https://www.lisenet.com/2013/install-luks-and-create-an-encrypted-luks-partition-on-debian/]]
+  * [[https://www.lisenet.com/2013/install-luks-and-create-an-encrypted-luks-partition-on-debian/]]
+  * [[https://www.cyberciti.biz/security/how-to-change-luks-disk-encryption-passphrase-in-linux/]]
+  * [[https://www.digitalocean.com/community/tutorials/how-to-use-rsync-to-sync-local-and-remote-directories]]
 ===== Links =====
   * [[https://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/|How To: Linux Hard Disk Encryption With LUKS]]
   * [[https://wiki.hackzine.org/sysadmin/linux-lvm-luks-resize.html|Resizing a LUKS volume on LVM]]
+  * [[https://unix.stackexchange.com/questions/320957/extend-a-luks-encrypted-partition-to-fill-disk|Extend a LUKS encrypted partition to fill disk]]
+  * [[https://we.riseup.net/debian/how-to-grow-ext4+lvm+luks+raid|How to grow ext4+lvm+LUKS+RAID]]
   * [[https://jschumacher.info/2016/11/encrypt-an-existing-linux-installation-with-luks-and-lvm/|Encrypt an existing Linux installation with LUKS and LVM]]
   * [[https://unix.stackexchange.com/questions/472114/replace-luks-partition-with-ext4-partition-with-same-contents|Replace LUKS partition with ext4 partition with same contents]]
@@ Line 48: / Line 67: @@
   * [[https://superuser.com/questions/1193290/best-order-of-raid-lvm-and-luks/1193307|Best order of RAID, LVM and LUKS
 ]]
+  * [[https://xo.tc/setting-up-full-disk-encryption-on-debian-9-stretch.html|Setting Up Full Disk Encryption on Debian 9 Stretch]]
+  * [[https://www.virtualbox.org/manual/ch09.html#diskencryption|VirtualBox: Encryption of Disk Images]]
+  * [[https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system|dm-crypt/Encrypting an entire system]]
+  * [[https://blog.tinned-software.net/create-a-luks-encrypted-partition-on-linux-mint/|Create a luks encrypted partition on Linux Mint]]
+  * [[https://wiki.archlinux.org/index.php/Dm-crypt/Swap_encryption|dm-crypt/Swap encryption]]
+  * [[https://www.tecmint.com/clone-linux-partitions/|How to Clone a Partition or Hard drive in Linux]]
+  * [[https://www.makeuseof.com/tag/2-methods-to-clone-your-linux-hard-drive/|How to Clone Your Linux Hard Drive: 4 Methods]]
+  * [[https://smallbusiness.chron.com/clone-encrypted-hard-drive-57682.html|How to Clone an Encrypted Hard Drive]]
+  * [[https://superuser.com/questions/1414795/cloning-hdd-containing-boot-and-lvm-to-new-hdd|Cloning HDD containing /boot and LVM to new HDD]]
+  * [[https://roubert.name/joakim/migratetolargerdisks.html|Migrate Linux RAID 1+LVM System To Larger Disks HOWTO]]
+  * [[https://www.linuxquestions.org/questions/slackware-14/create-software-raid1-on-one-disk-later-add-second-disk-4175449017/|create software raid1 on one disk, later add second disk?]]
+  * [[https://www.linuxquestions.org/questions/fedora-35/how-to-resize-extend-a-volume-group-895429/|how to resize / extend a volume group]]
+  * [[https://serverfault.com/questions/320310/how-to-resize-raid1-array-with-mdadm|How to resize RAID1 array with mdadm?]]
+  * [[https://askubuntu.com/questions/944564/moving-raid-5-to-another-computer|Moving RAID 5 to another computer]]
+  * [[https://superuser.com/questions/307541/copy-entire-file-system-hierarchy-from-one-drive-to-another|Copy entire file system hierarchy from one drive to another]]
+  * [[https://forum.manjaro.org/t/how-to-clone-a-luks-encrypted-home-root-swap-partition-from-a-hdd-to-an-ssd/85741|How to clone a LUKS encrypted home/root/swap partition from a HDD to an SSD?]]

Differences

Know How