Planning for LDT Attribute Storage
Before a GuardPoint is enabled for LDT, make sure that there is sufficient free disk space in the file system to which the GuardPoint belongs. Free space is required for LDT attributes and (in Linux) metadata in the MDS file. LDT attributes are created during the initial encryption and are never freed until the GuardPoint is permanently unguarded and removed from the protection of an LDT policy. In contrast, disk space for metadata in the MDS file is temporary, kept only during the live transformation process.
When planning how much free disk space to reserve for LDT on a GuardPoint, consider the following:
-
Number of files in the GuardPoint
-
(Linux) Average length of absolute pathnames of files in the GuardPoint
The LDT process pre-allocates disk space for the Linux MDS file based on a minimum of 200K files with an average pathname of 1024 bytes per GuardPoint. The minimum space amounts to 325MB of disk space for the MDS file for each GuardPoint, even if file count is very low. (In Windows, LDT reserves the space when the file is rekeyed.)
