Fedora Account System
Red Hat Associate
Red Hat Customer
Consider adding support for LUKS encrypted LVM volume groups. Reproducible: Always
https://discussion.fedoraproject.org/t/anaconda-web-installer-and-lvm/190560
The web UI does not implement custom storage. It's part of cockpit.
Thanks for the feature request, we discussed this in the team. This needs some design from as, as there is a concern about how discoverable it would be and how we would transparently handle creating a LUKS device and then a volume group on top.
A bit more details: What is requested here is the ability to created a LVM2 volume group that uses physical volumes that are LUKS encrypted block devices. This is possible with Cockpit, but there is no UI that would do it in a single step. You first need to "Format" the block device that should become the physical device with "No filesystem" and your desired encryption options. Let's say it is /dev/sda2. This will show up in Cockpit as "Unformatted data (encrypted)". Then you can select /dev/sda2 in the "Create volume group" dialog as the physical volume. It is labelled "/dev/sda2" and discribes "Encrypted partition of XXX". So the functionality is there, but it is non-obvious how to do this. The fact that Cockpit hides the details with filesystems but requires the user to discover them by themselves without any hints in other cases is no help. There was some attempt at making this more discoverable (in general, not for LVM2 specifically), but it has stalled. Please check out this demo: https://www.youtube.com/watch?v=-UyTjy-dlp8, it mentions encrypted physical volumes around the 7 minute mark. For LVM2 specifically, we could add a "Encrypt with a passphrase" option to the "Create volume group" dialog. This would encrypt all selected block devices before using them as physical volumes. But that might also lead to confusion when later adding more physical volumes. And we are also on the way of re-implementing Stratis...