<div dir="ltr">We're aiming for an off-line scan; I'll look into sysresccd as an option.<div><br></div><div>As for mounting the LVs, I get this sort of result:</div><div><div><font face="monospace, monospace">root@cowsvplav01:~# pvs</font></div><div><font face="monospace, monospace"> PV VG Fmt Attr PSize PFree</font></div><div><font face="monospace, monospace"> /dev/sdb5 ubuntu-vg lvm2 a-- 14.76g 268.00m</font></div><div><font face="monospace, monospace">root@cowsvplav01:~# vgs</font></div><div><font face="monospace, monospace"> VG #PV #LV #SN Attr VSize VFree</font></div><div><font face="monospace, monospace"> ubuntu-vg 1 2 0 wz--n- 14.76g 268.00m</font></div><div><font face="monospace, monospace">root@cowsvplav01:~# lvs</font></div><div><font face="monospace, monospace"> LV VG Attr LSize Pool Origin Data% Move Log Copy% Convert</font></div><div><font face="monospace, monospace"> root ubuntu-vg -wi------ 13.50g</font></div><div><font face="monospace, monospace"> swap_1 ubuntu-vg -wi------ 1020.00m</font></div><div><font face="monospace, monospace">root@cowsvplav01:~# ls /dev/mapper</font></div><div><font face="monospace, monospace">control</font></div><div><font face="monospace, monospace">root@cowsvplav01:~#</font></div></div><div><br></div><div>So I don't know how I'm going to mount any of it. Yes, I've hot-added it. FWIW, I'm using VMware ESXi 5.1.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Nov 3, 2015 at 12:46 PM, Adam Thompson <span dir="ltr"><<a href="mailto:athompso@athompso.net" target="_blank">athompso@athompso.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Note that if looking for Linux rootkits, NFS export will/can hide them. Otherwise, yeah...<div><div class="h5"><br><br><div class="gmail_quote">On November 3, 2015 12:37:28 PM CST, John Lange <<a href="mailto:john@johnlange.ca" target="_blank">john@johnlange.ca</a>> wrote:<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">You could just mount the remote disk over the "network" and then scan it.<div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Nov 3, 2015 at 11:48 AM, Adam Thompson <span dir="ltr"><<a href="mailto:athompso@athompso.net" target="_blank">athompso@athompso.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><br>
<br>
On 15-11-03 10:55 AM, Kevin McGregor wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I would like to be able to temporarily move a disk from one Linux system to another. The disk has a complete LVM2 volume group on it which I would like to mount on the second system. However, I may or may not be able to mark the volume group as "exported".<br>
<br>
Is there any way to import a volume group which isn't marked as "exported"? Or to use the destination system to mark it as such?<br>
<br>
Background: I've been tasked with creating a Linux VM (Virtual Machine) with ClamAV on it which can scan other Linux VM disks. To do that I assumed I'd shut down the target system and mount its disks on the scanning VM, do the scan, then remove the target disks from the scanning VM.<br>
<br>
Is there a better way?<br>
<br>
Kevin<br>
</blockquote>
<br></div></div>
Boot a LiveCD on the to-be-scanned VM?<br>
<br>
Actually, I would boot a LiveCD in the dedicated VM anyway. Sysresccd works well, and usually has a reasonably-up-to-date version of ClamAV. Also, it doesn't require 3D video, so it works well in a VM (unlike, say, Ubuntu, CentOS 7, etc.).<br>
<br>
If you want a regular HDD (vdd?) installed linux system anyway, simply running "pvs", "vgs", "lvs" and then mounting the FS out of /dev/mapper should work. You might have to do a "{pv,vg,lv}change -ay" if it's not marked as active. Do NOT flag it as exported once you're done scanning it, or the origin system may refuse to automount it.<br>
<br>
If you're running in VMware, I would recommend hot-adding the volume to the scanning VM so that it never accidentally tries to boot off it.<br>
<br>
-Adam<br>
_______________________________________________<br>
Roundtable mailing list<br>
<a href="mailto:Roundtable@muug.mb.ca" target="_blank">Roundtable@muug.mb.ca</a><br>
<a href="http://www.muug.mb.ca/mailman/listinfo/roundtable" rel="noreferrer" target="_blank">http://www.muug.mb.ca/mailman/listinfo/roundtable</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div>John Lange<br><a href="http://www.johnlange.ca" target="_blank">www.johnlange.ca</a></div>
</div>
<p style="margin-top:2.5em;margin-bottom:1em;border-bottom:1px solid #000"></p><pre><hr><br>Roundtable mailing list<br><a href="mailto:Roundtable@muug.mb.ca" target="_blank">Roundtable@muug.mb.ca</a><br><a href="http://www.muug.mb.ca/mailman/listinfo/roundtable" target="_blank">http://www.muug.mb.ca/mailman/listinfo/roundtable</a><br></pre></blockquote></div><br>
-- <br></div></div>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</div><br>_______________________________________________<br>
Roundtable mailing list<br>
<a href="mailto:Roundtable@muug.mb.ca">Roundtable@muug.mb.ca</a><br>
<a href="http://www.muug.mb.ca/mailman/listinfo/roundtable" rel="noreferrer" target="_blank">http://www.muug.mb.ca/mailman/listinfo/roundtable</a><br>
<br></blockquote></div><br></div>