Setup on HW raid with data disk encryption

[Danwwilson]

Hi,

I’m new and learning like many others, so thanks to all the experienced people in the forum who help make this a better place.

I’m trying to setup proxmox to use a mix of VMs and LXCs, and have successfully created some containers and have networking going so that is a small win.

My machine at the moment uses a PERC H700 raid controller. At the moment I have 3 raid1 disks (6 physical disks). For one of them I would like to use this as an encrypted data drive across multiple VMs and LXCs. The VMs and LXCs I can live with this out them being encrypted, but want to make sure at the very least the data disk is encrypted.

I am open to encrypting the lot if there is a good way to do this, however the plan is for this server to be in a colocation rack that won’t always have physical access at reboot.

Any tutorials or guidance would be greatly appreciated.

 

[waltar]

Perc H700 is really old hardware, maybe you should affort somethink newer as this is anyway eating your money with your power bill and you won't be happy with the performance. If it's just for learning I would suggest the following:
Create a raid6 out of your 6 drives. Do a Debian Installation while in advanced mode choose gpt label (instead of msdos), don't do lvm, partion 100g to "/", 2g to /boot, rest do /data, select xfs, let the inst run. After done you can decide if you want to hard partition "/data" into 2 parts for encrypted data and unencrypted vm/lxc space or encrypt all for to border of vm images versus vm internal data. After decision setup luks on /data or a part of. Now "update" Debian to Proxmox pve : https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_12_Bookworm .
You should definitiv look for get a Dell "perccli" raid ctrl. tool anywhere which isn't anymore official available at Dell for this old ctrl. - otherwise you are not able to be aware of the health of your disks and raidset !!!