Root LUKS in ignition

Project Discussion
1

Have tried to move root partition to LUKS one. It seems that it works but it does not fill up entire free space. By default FCOS uses entire hdd space. Any ideas how to use entire free for LUKS?

storage:
luks:
- name: root
device: /dev/disk/by-partlabel/root
clevis:
tang:
- url: https://tang.lan
thumbprint: 35kfgkskdfjhgsdfj4574JKHJGh
wipe_volume: true
filesystems:
- device: /dev/mapper/root
label: root
format: xfs
wipe_filesystem: true

2

I’ve posted storage: document root partition sizing considerations by jlebon · Pull Request #231 · coreos/fedora-coreos-docs · GitHub which should clarify this a bit. Let me know if that helps!

BTW, re. Tang it may not work on reboot yet. There are a few patches missing still AFAIK: Tang-pinned rootfs doesn't work in FCOS · Issue #692 · coreos/fedora-coreos-tracker · GitHub.

3

Thx for replay. Ive finnaly gave up with Fedore CoreOS and moved my home server to Fedora Server + LUKS (setup LUKS the way it now does not reask for pass on reboot … this thing was the main problem for me)