I'm finding a lot of conflicting information out there, and as of yet haven't found anyone trying to pull together all of the components that I'm trying to do, so I'm hoping someone who understands SSD, encrypted LVMs and so on can stop by and help out.
Basically, my system is a laptop with:
- /dev/sda: 32 GB SSD
- /dev/sdb: 256 GB SSD
- /dev/sdc: 1000 GB HD
Generally my Linux installs consist of three partitions:
- ~50 mb /boot
- large /home
- ~30 gb "everything else"
So effectively I'd like
/dev/sda1 -> /boot
/dev/sda2 -> /
/dev/sdb1 -> /home
/dev/sdc1 -> /swap
/dev/sdc2 -> /mnt/storage
The catch is I'd like to encrypt all of this (except for /boot
and /mnt/storage
which can stay unencrypted). I've read that when encrypting SSDs there can be issues with things like TRIM, and that ideally I'd want to use EXT4 with some particular options set, and that I must be very careful with partition alignment, and some just claim that encrypted LVMs really don't play well with SSDs and I should just use EncFS or eCryptfs (although people seem unclear and/or polarized on whether these should be used to encrypt "mount-at-boot" partitions like / and /home).
Is there any canonical information on this?
discard
specified as a mount option for the filesystem.discard
thing. Is there anything else special I need to do, wrt alignment and so on? Reports on that seem conflicting as well