A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use
LUKS encryption to encrypt the entire drive as one unit on a live web server?
IMy ISP told me that I need to retain two unencrypted partitions, one as the boot partition, and the other to allow CentOS 7 to establish state for the OS. I am thus told that only additional partitions would be encrypted. How do I determine which file system elements to retain in the OS-state partition, and which file system elements to move to an encrypted partition or partitions?
I would like to use virtualbox to set up two CentOS 7 virtual machines on the server.
1.) The first virtual machine would host web apps that have https and smtp connectivity to the internet.
2.) The second virtual machine would host the MySQL databases for the first virtual machine. And the second virtual machine would ONLY be able to connect with the first virtual machine, not with any other computers, devices, networks, or machines, etc.
So then do I have four partitions?
1.) boot partition (how big?) 2.) OS state partition (how big and what is in it?) a.) Is virtualbox running here or in an encrypted partition? 3 & 4) Are the two virtual machines each in their own encrypted partitions? Or are the virtual machines bundled into one encrypted partition with the virtualbox program?
To start answering the question of what goes in which partition, I navigated the terminal to
cd / and typed
ls -al to show everything in the root directory of the server as follows:
[user@domain /]$ ls -al total 108 . .. .autorelabel bin -> usr/bin boot crd dev etc home import lib -> usr/lib lib64 -> usr/lib64 media mnt opt proc .readahead root run sbin -> usr/sbin srv sys tmp usr var
Do the folders listed in
ls -al for the
/ directory include everything in all partitions? If not, what else is there on the hard drive and how do I find it? Also, how do we plan to segregate all possible disk elements into partitions in a scheme for LUKS encryption?