sudo dracut --force ???

[mgflax]

I'm running Qubes off a Crucial m4 256Gig SSD mSata (Thinkpad x230). It recently slowed, and I'm suspecting that the SSD needs a good "trim".  I'm following the instructions at http://blog.christophersmart.com/2013/06/05/trim-on-lvm-on-luks-on-ssd/ . Some of the steps are reasonable:

• Adding "discard" to "/"'s ext4 entry in /etc/fstab
• Adding "allow-discard" to the luks entry in /etc/crypttab
• Adding issue_discards = 1 to /etc/lvm/lvm.conf

But now I need to recreate initramfs with something like the following, but it scares me.

• sudo dracut --force -I /etc/crypttab

Is this safe/proper? Is there documentation telling how to recreate Qubes' initramfs?

Many thanks!

Marshall

p.s. I'm more concerned about my laptop being decrypted if lost/stolen (rather than an adversary taking repeated snapshots) and am OK with the security downside of SSD trim.

[Marek Marczykowski-Górecki]

On 30.08.2013 01:19, mgflax wrote:
> I'm running Qubes off a Crucial m4 256Gig SSD mSata (Thinkpad x230). It
> recently slowed, and I'm suspecting that the SSD needs a good "trim". I'm
> following the instructions at
> http://blog.christophersmart.com/2013/06/05/trim-on-lvm-on-luks-on-ssd/ .
> Some of the steps are reasonable:
>
>

> - Adding "discard" to "/"'s ext4 entry in /etc/fstab
> - Adding "allow-discard" to the luks entry in /etc/crypttab
> - Adding issue_discards = 1 to /etc/lvm/lvm.conf

>
>
> But now I need to recreate initramfs with something like the following, but
> it scares me.
>

> - sudo dracut --force -I /etc/crypttab

>
>
> Is this safe/proper? Is there documentation telling how to recreate Qubes'
> initramfs?

Yes, this is the standard way of using dracut. Without --force, it will simply
refuse to create initramfs if already exists.

--
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

[Marshall Flax]

Thanks! Other than backing up
/boot/initramfs-3.7.6-2.pvops.qubes.x86_64.img, is there anything else
I should do to minimize the risk of my doing something horrible?

Thanks again!

Marshall

[Marek Marczykowski-Górecki]

On 30.08.2013 01:47, Marshall Flax wrote:
> Thanks! Other than backing up
> /boot/initramfs-3.7.6-2.pvops.qubes.x86_64.img, is there anything else
> I should do to minimize the risk of my doing something horrible?

This is the only file which dracut modify.