4

Let's suppose I create a file, map it to /dev/loop0, and create a LUKS partition inside

dd if=/dev/zero of=myfile bs=1M count=1000
losetup /dev/loop0 myfile 
cryptsetup -c aes-cbc-essiv:sha256 -s 256 -v -y luksFormat /dev/loop0

I then open the encrypted partition

cryptsetup luksOpen /dev/loop0 myfile

Now, I have my encrypted file appear as a disk /dev/mapper/myfile. I need to create a filesystem before I can use it.

Here is my question: Given that this my new filesystem-inside-file resides on another ext4 filesystem (which already is using journal), what options would be best for this new filesystem ?

Specifically, if I format my new filesystem-inside-file ext4, should I use journal?. Somehow, the idea of journal filesystem inside another journal filesystem seems not right to me, intuitively.

2
  • That's a bizarre setup. Why not use ecryptfs? Commented Jan 18, 2014 at 23:38
  • 1
    what are the advantages of eCryptfs over my solution? I don't know eCryptfs, so I cannot compare it. But the setup I am using is simple and transparent. Commented Jan 19, 2014 at 13:17

1 Answer 1

2

From my experience running an encrypted reiserfs with private information you should not put that on an journalling filesystem like ext3. I switched back from ext3 to having the file on an ext2 partition after I had to restore from a backup.

Over the years ( I have had this file for 5 years ), I had to run recovery several times, and when hosted on ext3 this was the only time reiserfsck could not recover. I think that was because ext3 did a recover which confused the internals of the encrypted disk.

I never tried a non-journal filesystem on a journal filesystem (e.g. encrypted ext2 file on reiserfs) for me the important (i.e. encrypted data should be journalled).

I am still running reiserfs, never used ext4 for this (but I am considering btrfs, just need to check some time if that is stable enough)

If you put your homedirectory on there, be prepared that this feels a bit sluggish, I don't think any finetuning with parameters could have helped that, and I don't think the ext4 ones will influence things much, given that encryption is a performance penalty hit in all directions.

2
  • that is very interesting. Could you perhaps explain why you prefer reiserfs/btrfs above ext4 ? Commented Jan 18, 2014 at 10:18
  • @MartinVegter ReiserFS was the only option when I wanted a journaling filesystem, ext3 came years later. Btrfs seems the next major step.
    – Timo
    Commented Jan 18, 2014 at 10:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .