Installing Mdadm And C7 On New Computer
I have a new computer with 2 x 2TB SSDs where I wanted to install C7 and use mdadm for RAID1 configuration and encrypting the /home partition. On the net I found https://tuxfixer.com/CentOS-7-installation-with-lvm-raid-1-mirroring/ which I adopted slightly with respect to partition sizes, using RAID1 for /boot and /root as well and added the /home partition with RAID1 and chose to have /home encrypted.
Is there an “official/recommended/suggested” page for installing C7 and using mdadm for RAID1 in combination with LUKS encryption? As far as I can tell things seem right but would like to check before proceeding to install lots of other software.
Thanks.
7 thoughts on - Installing Mdadm And C7 On New Computer
It may be a good idea to also have / and swap encrypted, since user data can go there easily
(logs, locatedb, swapped mem).
I would do:
– /boot as a separate RAID1 (md1=sda1+sdb1)
– then another RAID1 (md2=sda2+sdb2) using all the remaining disk
– luks on top of md2, giving you luks-xxxxx
– LVM with a PV on luks-xxxxx
– VG and LVs for swap, / and /home (do not assign all the available space now, especially if using xfs as filesystem)
Not sure if you can do this setup through the installer, you have to try (in a VM maybe).
Regards.
Thank you. I will have time to get back to this system tomorrow to try this.
Roberto, what would the advantage(s) be with your setup, ie one RAID1 array for everything but /boot compared to what I had done, ie three RAID1 arrays for /boot/efi RAID1, /boot RAID1 and one LVM-RAID1 for / and /home? As a naive user it would seem to me that the setup I did would be more resilient if a disk fails, or?
VGhpbmsgaGUgbWlnaHQgaGF2ZSBqdXN0IG1pc3NlZCB0aGUgZmFjdCB0aGF0IHlvdSBoYWQgRUZJ
IGJvb3QgYXN3ZWxsLiANClNvIHRoZW4gaXQgd291bGQgYmU6DQoNCi9ib290IG1kMA0KDQovYm9v dC9FRkkgbWQxDQoNCi8gbWQyIC0+IHZnMCAtPiBsdnMNCg0KT3RoZXJ3aXNlIGl0IHdhcyBtb3Jl IGEgc3VnZ2VzdGlvbiBvbiB1c2luZyBlbmNyeXB0aW9uIGZvciBtb3JlIHRoZW4gDQpqdXN0IHRo ZSAvaG9tZSBwYXJ0aXRpb24gc2luY2UgdGhlcmUgaXMgYWx3YXlzIGEgcmlzayB3aXRoIFNXQVAg ZXRjIHRvIA0KaGF2ZSBpbmZvcm1hdGlvbiB0aGF0IHlvdSBkbyBub3Qgd2FudCB0byBiZSByZWFk Lg0KDQpNeSBjdXJyZW50IHNldHVwIGdvZXM6DQoNCi9kZXYvbWFwcGVyL3ZnMC1yb290wqDCoMKg wqDCoMKgwqDCoMKgIMKgIMKgwqAgLw0KL2Rldi9tYXBwZXIvdmcwLXVzcsKgwqDCoMKgwqDCoMKg wqDCoMKgIMKgIMKgwqAgL3Vzcg0KL2Rldi9udm1lMG4xcDLCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgwqAgwqAgwqAgL2Jvb3TCoMKgwqDCoMKgwqAgPC0gdGhpcyB3b3VsZCBiZSBhIG1k IA0KZGV2aWNlIGluIHlvdXIgY2FzZQ0KL2Rldi9udm1lMG4xcDHCoMKgwqDCoMKgwqDCoMKgwqDC
oMKgwqDCoMKgwqAgwqAgwqAgwqDCoCAvYm9vdC9lZmkgPC0gdGhpcyB3b3VsZCBiZSBhIG1kIA0K
ZGV2aWNlIGluIHlvdXIgY2FzZQ0KL2Rldi9tYXBwZXIvdmcwLWhvbWXCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgL2hvbWUNCi9kZXYvbWFwcGVyL3ZnMC12YXLCoMKgwqDCoMKgwqDCoMKgwqAgwqAg wqAgwqDCoCAvdmFyDQovZGV2L21hcHBlci92ZzAtdG1wwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgL3RtcA0KL2Rldi9tYXBwZXIvdmcwLXZhcl90bXDCoMKgwqDCoMKgwqAgwqDCoCAv dmFyL3RtcA0KL2Rldi9tYXBwZXIvdmcwLXZhcl9sb2fCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIC92
YXIvbG9nDQovZGV2L21hcHBlci92ZzAtdmFyX2xvZ19hdWRpdMKgIC92YXIvbG9nL2F1ZGl0DQoN
Ck5vdGUgdGhhdCB3ZSBhcmUgbW9zdCBsaWtlbHkgbWl4aW5nIGRhdGEgcmVkdW5kYW5jeSB3aXRo IGRhdGEgc2VjdXJpdHkgYSANCmJpdCBoZXJlLiBTbyBhcyBmYXIgYXMgeW91ciBwbGFuIHRvIHJ1
biBhIG1kIGRldmljZSBmb3IgZWFjaCAicGFydGl0aW9uIiANCm5lZWRlZCB0aGF0IGlzIGEgc291
bmQgYW5kIHNvbGlkIHBsYW4uDQoNCldoZW4gaXQgY29tZXMgdG8gZW5jcnlwdGlvbiB0aGUgcG9p bnQgaXMgdGhhdCB5b3UgbWlnaHQgd2FudCB0byBoYXZlIA0KbW9yZSB0aGVuIGp1c3QgL2hvbWUg cHJvdGVjdGVkLiBCdXQgdGhpcyBpcyB2ZXJ5IGRlcGVuZGVudCBvbiB5b3VyIA0KdGhyZWF0IG1v ZGVsLiBJZiB5b3UgaGF2ZSBhIGxhcHRvcCBlbmNyeXB0aW9uIG9mIGFsbCBwYXJ0aXRpb25zIGlz IA0Kc3VnZ2VzdGVkLg0KDQpSZWdhcmRzDQoNCg0KT24gMjAyMi0wNC0yNCAyMDo1NCwgSCB3cm90
ZToNCj4gT24gMDQvMjMvMjAyMiAwOToxOSBQTSwgSCB3cm90ZToNCj4+IE9uIDA0LzE5LzIwMjIg MDk6NTcgQU0sIFJvYmVydG8gUmFndXNhIHdyb3RlOg0KPj4+IE9uIDQvMTgvMjIgMToyNyBQTSwg SCB3cm90ZToNCj4+Pj4gSSBoYXZlIGEgbmV3IGNvbXB1dGVyIHdpdGggMiB4IDJUQiBTU0RzIHdo ZXJlIEkgd2FudGVkIHRvIGluc3RhbGwgQzcgYW5kIHVzZSBtZGFkbSBmb3IgUkFJRDEgY29uZmln dXJhdGlvbiBhbmQgZW5jcnlwdGluZyB0aGUgL2hvbWUgcGFydGl0aW9uLiBPbiB0aGUgbmV0IEkg Zm91bmQgaHR0cHM6Ly90dXhmaXhlci5jb20vY2VudG9zLTctaW5zdGFsbGF0aW9uLXdpdGgtbHZt LXJhaWQtMS1taXJyb3JpbmcvIHdoaWNoIEkgYWRvcHRlZCBzbGlnaHRseSB3aXRoIHJlc3BlY3Qg dG8gcGFydGl0aW9uIHNpemVzLCB1c2luZyBSQUlEMSBmb3IgL2Jvb3QgYW5kIC9yb290IGFzIHdl bGwgYW5kIGFkZGVkIHRoZSAvaG9tZSBwYXJ0aXRpb24gd2l0aCBSQUlEMSBhbmQgY2hvc2UgdG8g aGF2ZSAvaG9tZSBlbmNyeXB0ZWQuDQo+Pj4gSXQgbWF5IGJlIGEgZ29vZCBpZGVhIHRvIGFsc28g aGF2ZSAvIGFuZCBzd2FwIGVuY3J5cHRlZCwgc2luY2UgdXNlciBkYXRhIGNhbiBnbyB0aGVyZSBl YXNpbHkNCj4+PiAobG9ncywgbG9jYXRlZGIsIHN3YXBwZWQgbWVtKS4NCj4+Pg0KPj4+IEkgd291
bGQgZG86DQo+Pj4gLSAvYm9vdCBhcyBhIHNlcGFyYXRlIFJBSUQxIChtZDE9c2RhMStzZGIxKQ0K
Pj4+IC0gdGhlbiBhbm90aGVyIFJBSUQxIChtZDI9c2RhMitzZGIyKSB1c2luZyBhbGwgdGhlIHJl bWFpbmluZyBkaXNrDQo+Pj4gLSBsdWtzIG9uIHRvcCBvZiBtZDIsIGdpdmluZyB5b3UgbHVrcy14
eHh4eA0KPj4+IC0gTFZNIHdpdGggYSBQViBvbiBsdWtzLXh4eHh4DQo+Pj4gLSBWRyBhbmQgTFZz IGZvciBzd2FwLCAvIGFuZCAvaG9tZSAoZG8gbm90IGFzc2lnbiBhbGwgdGhlIGF2YWlsYWJsZSBz cGFjZSBub3csIGVzcGVjaWFsbHkgaWYgdXNpbmcgeGZzIGFzIGZpbGVzeXN0ZW0pDQo+Pj4NCj4+
PiBOb3Qgc3VyZSBpZiB5b3UgY2FuIGRvIHRoaXMgc2V0dXAgdGhyb3VnaCB0aGUgaW5zdGFsbGVy LCB5b3UgaGF2ZSB0byB0cnkgKGluIGEgVk0gbWF5YmUpLg0KPj4+DQo+Pj4gUmVnYXJkcy4NCj4+
Pg0KPj4gVGhhbmsgeW91LiBJIHdpbGwgaGF2ZSB0aW1lIHRvIGdldCBiYWNrIHRvIHRoaXMgc3lz dGVtIHRvbW9ycm93IHRvIHRyeSB0aGlzLg0KPj4NCj4+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBDZW50T1MgbWFpbGluZyBsaXN0DQo+PiBDZW50
T1NAY2VudG9zLm9yZw0KPj4gaHR0cHM6Ly9saXN0cy5jZW50b3Mub3JnL21haWxtYW4vbGlzdGlu Zm8vY2VudG9zDQo+IFJvYmVydG8sIHdoYXQgd291bGQgdGhlIGFkdmFudGFnZShzKSBiZSB3aXRo IHlvdXIgc2V0dXAsIGllIG9uZSBSQUlEMSBhcnJheSBmb3IgZXZlcnl0aGluZyBidXQgL2Jvb3Qg Y29tcGFyZWQgdG8gd2hhdCBJIGhhZCBkb25lLCBpZSB0aHJlZSBSQUlEMSBhcnJheXMgZm9yIC9i b290L2VmaSBSQUlEMSwgL2Jvb3QgUkFJRDEgYW5kIG9uZSBMVk0tUkFJRDEgZm9yIC8gYW5kIC9o b21lPyBBcyBhIG5haXZlIHVzZXIgaXQgd291bGQgc2VlbSB0byBtZSB0aGF0IHRoZSBzZXR1cCBJ
IGRpZCB3b3VsZCBiZSBtb3JlIHJlc2lsaWVudCBpZiBhIGRpc2sgZmFpbHMsIG9yPw0KPg0KPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDZW50T1Mg bWFpbGluZyBsaXN0DQo+IENlbnRPU0BjZW50b3Mub3JnDQo+IGh0dHBzOi8vbGlzdHMuY2VudG9z Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NlbnRvcw0K
I am coming back to this topic after a long while. Again, I am installing CentOS 7 on a new machine. Using the graphical installer and following the suggestion above, I first created the /boot partition in RAID1 configuration, then /boot EFI in RAID1 configuration, after which I proceeded to create an LVM in RAID1 configuration for the remainder of the disks using the / partition.
If I understand the above correctly, I should then create /home and swap using this LVM (as well as possibly /var) but do not seem to be able to do so in the graphical installer.
Have I missed something? Or, do I need to do this differently following another path?
Thank you in advance.
Thank you.
Did not get any response to the above and I will have an opportunity to work with this computer again in a few days.
If I were to partition the disks as suggested above – and which is not supported by the CentOS 7 installation software (anaconda?) – which software would be suggested to use to partition the disks prior to installing CentOS 7?
Thank you in advance.