Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-05-04 15:55:16 -04:00
Code Issues Projects Releases Packages Wiki Activity

Update secondary storage page: work around 4k incompatibility, drop unnecessary luksFormat arguments

Browse source 
Merge branch 'pr-1443'
This commit is contained in:
unman 2025-05-02 01:08:19 +00:00
commit 41470dbee4
No known key found for this signature in database
GPG key ID: BB52274595B71262
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
user/advanced-topics/secondary-storage.md
View file

@ -65,10 +65,12 @@ In theory, you can still use file-based disk images ("file" pool driver), but it
Assuming the secondary hard disk is at /dev/sdb (it will be completely erased), you can set it up for encryption by doing in a dom0 terminal (use the same passphrase as the main Qubes disk to avoid a second password prompt at boot):
```
sudo cryptsetup luksFormat --hash=sha512 --key-size=512 --cipher=aes-xts-plain64 --verify-passphrase /dev/sdb
sudo cryptsetup luksFormat --sector-size=512 /dev/sdb
sudo blkid /dev/sdb
```
(The `--sector-size=512` argument can sometimes work around an incompatibility of storage hardware with LVM thin pools on Qubes. If this does not apply to your hardware, the argument will make no difference.)
Note the device's UUID (in this example "b209..."), we will use it as its luks name for auto-mounting at boot, by doing:
```