On Fri, Apr 24, 2015 at 09:33:08PM +1000, Russell Coker wrote:
I think that the best thing to do is have some scheduled down-time to convert the system to RAID-1 with encryption.
yep. note that downtime can be minimised because you can set up the degraded RAID-1 on LUKS disk (a few minutes downtime to powerdown, install disk, and then power up) and then repeatedly rsync everything to it while the system is operating normally....this will minimise the amount of time needed to do the final rsync of the files while the system is offline. when you're ready to do the final conversion, run rsync again. when that's finished, immediately reboot to a rescue CD/USB-stick, mount the old partition(s) and the new degraded RAID-1 partition(s) and then do a final rsync from the old to the new. chroot into the new RAID rootfs, reconfigure grub so that it boots from the RAID rootfs, and re-run grub-install. reboot, then repartition and setup LUKS on the old disk and add it to the RAID-1. total downtime: 5-10 minutes plus however long it takes to run the final rsync (probably only a few minutes). this method is the best way to minimise downtime while transferring a linux filesystem from old storage media to new, whether LUKS or RAID or LVM or whatever is involved or not. craig -- craig sanders <cas@taz.net.au>