* Create RAID volume (Example below) mdadm --create /dev/md0 --level=5 --raid-devices=3 /dev/sdb /dev/sdc /dev/sdd --spare-devices=1 /dev/sde mdadm --detail --scan >> /etc/mdadm.conf * Change number of spares in /etc/mdadm.conf to 1 * Create encrypted RAID device (two seperate steps) Use hey chicago for password cryptsetup luksFormat /dev/md0 cryptsetup luksOpen /dev/md0 CryptRAID * Make xfs filesystem on new encrypted device, recommended to run this step in a screen mkfs.xfs -L $HOSTNAME /dev/mapper/CryptRAID * Create keyfile dd if=/dev/urandom of=/root/$HOSTNAME.keyfile bs=1024 count=4 chmod 0400 /root/$HOSTNAME.keyfile cryptsetup luksAddKey /dev/md0 /root/$HOSTNAME.keyfile * Backup Header cryptsetup luksHeaderBackup --header-backup-file /root/$HOSTNAME.header /dev/md0 * Copy the above files to Medstrat DG!!!! * Find UUID of md0, add UUID and uncomment the CryptRAID line in /etc/crypttab * Uncomment /etc/fstab CryptRAID line * Mount the filesystem mount -a * Install echoes