Debian 10 cloud-init - VM encryption
I just recently managed to get a Debian10 VM running from XOA hub.
Could anyone please tell me if it is possible to instruct cloud-init to create a VM with a full disk encryption as if I was creating the VM manually?
Could anyone advise me please?
I think you need to understand how cloudinit works first. It's a program which start with your operating system, applying instructions from a yaml file.
You can't remove your own existing root and replace it with a LUKS encrypted one just by telling Cloudinit to do so.
In your case, if you want something like that, you might need to create your own template first. Or add a new disks and encrypt it.
@olivierlambert Do you mean create a VM the way I usually do it with my full encryption and the convert it to a VM and the add cloud-init after?
If I do that will I still be able to expend the disk size via cloud-init?
That's a good question. I don't know. You should ask the cloudinit community about this