@Obsolesce said in Decrypting a LUKS encrypted drive at boot:

@DustinB3403 Oh is it the boot/os drive of a VM?

No it wouldn't be the boot partition, but a secondary array (R1).

@EddieJennings said in Decrypting a LUKS encrypted drive at boot:

I know it's not your ideal, but have you tried to use /etc/crypttab and store the key in a file somewhere that's owned by root and has 400 permissions, just to see if that method can do the automatic unlocking of the encrypted device?

If you're making said file that /etc/crypttab will use remember to do echo -n 'whatever' > yourfile, instead of just echo, else you'll bang your head against the wall not understanding why the stored password isn't working. Ask me how I know. 😉

I haven't tried it.

@dbeato said in Decrypting a LUKS encrypted drive at boot:

Did this work for you? https://www.malachisoord.com/2023/11/04/decrypt-additiona-luks-encrypted-volumes-on-boot/

I've never seen it, will review.

@Pete-S said in Blind swap / automatic rebuild on linux:

@DustinB3403 said in Blind swap / automatic rebuild on linux:

@Pete-S said in Blind swap / automatic rebuild on linux:

@travisdh1 said in Blind swap / automatic rebuild on linux:

@Pete-S said in Blind swap / automatic rebuild on linux:

@travisdh1 said in Blind swap / automatic rebuild on linux:

@Pete-S said in Blind swap / automatic rebuild on linux:

I often see that the argument for using hardware raid is to be able to initiate an automatic rebuild by just swapping a faulty drive for a new one.
A lot of people assume that software raid can't do that. But that's incorrect.

Software raid on linux (as in md managed by mdadm) can do the exact the same thing.

It's under policy and partition policy in mdadm.conf. You'll find on the man mdadm.conf page.
The spare-same-slot option would be the one that works the same way as hardware controllers usually do.

I haven't used it myself since I prefer to initiate the rebuild myself. But I wonder if you guys have used it?

I don't think blind swap is about automatic rebuild, that's a given no matter what software/hardware RAID is running. It's more about seeing the light is red instead of green on drive 6, so you know that is the one to replace.

The only example of not having that available, that I can think of, is https://www.45drives.com/

I don't know man.
A typical SMB would have no monitoring and any server would be stuck in a closet somewhere. Nobody would notice any red lights until several months later or until something breaks and then they'd have no clue what to do about it, wouldn't know who to call and wouldn't have any idea if the server even has warranty (it never has). A spare drive wouldn't be available unless it was an old discarded drive left on the shelf from the last time something was replaced.

While probably true, that doesn't really have anything to do with blind swap.

I'm just saying those that have their server park under control doesn't really need any LEDs. And those that really needs it, doesn't look at it.

But it would actually be a small thing to make a script that would indicate faulty drives. You look at /proc/mdstat and any drive showing a _ instead of U is lit up on the drive bay. It's controlled by SGPIO or SES. That's how the raid controller does it.

I thought MD was already capable of performing this. . .

I don't think so but I could be wrong.

I mean you could run raid 1 on a pair of sd cards. Since that md works on any type of block device or partition there is no guarantee that there are any drive bay lights or anything of that nature. But it's possible that there is an option for it.

Has a quick look and it looks like the ledmon package monitors md arrays and set LEDs accordingly.
So yes, software raid can indicate what drive has an error directly on the chassis with some additional software.

Here is a good example of why this is complex even for blind swap hardware RAID... it's not always clear what it is supposed to do.

https://mangolassi.it/topic/17314/replaced-drive-in-pe-t410-not-adding-to-virtual-disk/

Of interesting side note, the Linux md RAID system also implements Intel Matrix RAID and DDF (Disk Data Format) software RAID formats commonly used by consumer FakeRAID systems. Because of this, Linux md can sometimes convert FakeRAID into enterprise md RAID if you really know what you are doing 🙂

@Kelly said:

@scottalanmiller said:

Did it rebuild successfully?

I don't know. I ended up setting up the necessary VMs on other hosts and started rebuilding this one since it has been having stability issues in the last few weeks.

Ah okay, probably best but it is nice when you can figure out what happened, just to know what it was 😞

Just a guess..

For 6.5

sudo yum --enablerepo=base --disablerepo=citrix install postfix
http://xmodulo.com/how-to-install-additional-packages-in.html

For 7
http://discussions.citrix.com/topic/378880-xenserver-70-repositories/ post #5