Full-disk encryption using the Proxmox Mail Gateway installer ISO

[gheese]

We consider our emails highly confidential and the physical server is out of our office, thus have always had full-disk encryption for our mail servers in the past.

I'm now evaluating Proxmox Mail Gatway as a replacement and have bought an enterprise license for this. I've installed PMG using proxmox-mail-gateway_8.2-1.iso, but haven't found any official approach to set it up with an encrypted disk. While I understand the inherit risk of an extended downtime, that comes with an encrypted disk, I would have assumed that there's an option for that.

I've come across forum posts discussing alternative installation approaches, allowing full-disk encryption, but would not want to digress from the official guides.

What options do I have, to set up Proxmox Mail Gatway with full-disk encryption?

 

[fireon]

Which file system are you using?

Is the PMG installed physically or as a virtual machine?

 

[gheese]

I've installed PMG as a VM on our Proxmox test server and used the defaults that the installer chooses, so an LVM with an ext4 root partition.

 

[UdoB]

Install Debian Bookworm, including encryption.

Install PMG on top of that, this is officially supported: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_install_on_debian

 

[gheese]

Install Debian Bookworm, including encryption.

Install PMG on top of that, this is officially supported: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_install_on_debian

Oh shoot, looks like I've missed that! Thank you very much for you feedback - the outcome is exactly what I was looking for!

 

[fireon]

Install Debian Bookworm, including encryption.

Install PMG on top of that, this is officially supported: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_install_on_debian

@UdoB is absolutely right. That way, you can install Debian with LUKS, for example. This would mean that the VM would be fully encrypted.

I use the native encryption of ZFS directly on Proxmox VE. This means I don't have to worry about encryption in VMs. I find this easier to manage.

 

[gheese]

@UdoB is absolutely right. That way, you can install Debian with LUKS, for example. This would mean that the VM would be fully encrypted.

I use the native encryption of ZFS directly on Proxmox VE. This means I don't have to worry about encryption in VMs. I find this easier to manage.

Thank you very much for the hint with ZFS, I'll have a look!