1

My luks encrypted lvm is running out of space. I want to extend the volume group with a new physical volume.

Will the data on that physical volume be encrypted automatically when added to the volume group? Do I maintain encryption when extending a luks encrypted lvm with a physical volume?

AlexOnLinux
  • 635
  • 1
  • 8
  • 17

1 Answers1

3

Depends on where (on what level) is your encryption configured. Usually you have encrypted physical volumes (so the stack looks like partition->luks/dm-crypt device->physical volume->volume group->logical volumes), in this case you need to make sure the new PV is also encrypted. But you can also have encrypted logical volumes (in this case the luks/dm-crypt device is on top of the LV) in this case you just need to make sure to resize the LV correctly after adding the second PV and all data on the LV will still be encrypted.

Vojtech Trefny
  • 16,922
  • 6
  • 24
  • 48
  • thank you very much. I have created a new question on how to actually add that new pv. Would be nice if you can have a look at that too: https://unix.stackexchange.com/questions/618877/how-to-add-a-new-pv-to-an-extend-an-existing-luks-encrypted-lvm-and-maintain-enc – AlexOnLinux Nov 10 '20 at 08:23