Gentoo Archives: gentoo-amd64

From: The Doctor <drwho@××××××××.net>
To: gentoo-amd64@l.g.o
Subject: Re: [gentoo-amd64] Encryption Solution
Date: Tue, 03 Feb 2009 15:53:31
Message-Id: 49886872.60405@virtadpt.net
In Reply to: [gentoo-amd64] Encryption Solution by Tom
1 Tom wrote:
2
3 ...
4 > As mentioned above, the disk I want encrypted is a usb device, so it's
5 > removable.
6 > This among other things requires the encryption method to be usable
7 > from multiple machines but also from multiple OSes (Windows and Linux).
8 ...
9 > The main issue is obviously the filesystem.
10 > As far as I understand it, both methods work 'atop' any filesystem that
11 > the underlying OS supports.
12 > Because I want both windows and linux support, this would mean vfat,
13 > ntfs, or ext2(3,4??).
14
15 If you used TrueCrypt for this, it would not have to work on top of a
16 file system. It is possible to have TrueCrypt operate with an entire
17 partition and not an encrypted file system image sitting on top of (say)
18 a FAT32 file system.
19
20 In TrueCrypt v6.0a, you would do a Volumes -> Create new volume ->
21 Create a volume within a partition/device -> Standard TrueCrypt Volume
22 -> /dev/your_usb_drive_here and then format it with your file system of
23 choice (go ext2 if you're comfortable with using the Windows driver that
24 implements it; I'm not, but that's my damage).
25
26 > I have a working ext driver running in read-only mode under windows,
27 > but I wouldn't know how well it'll play when using encryption.
28
29 If it's read only and you want to back up data from your Windows install
30 as well, you're going to find that problematic.
31
32 > Another mayor question is dataloss.
33 > The usb-disc has 1TB, would it make sense to maybe have more than one
34 > partition, both from a performance and reliability standpoint?
35
36 You could do that if you wanted and use one partition for Windows stuff
37 and one partition for Linux stuff if you wanted to. My concern would be
38 how big a partition you'd need for Windows stuff and how big a partition
39 you'd need for Linux stuff. I don't think that it would be easy to
40 rework the partition scheme in case the amounts of data were different
41 from what you were expecting.
42
43 > Has anyone here a similar setup/usage of disc-encryption?
44 > Any thoughts on the matter?
45
46 What I wound up doing for one of my boxes was mounting the Windows
47 partition inside of my Gentoo install when it came time to back up,
48 backing it up under /mnt/backup_drive/windows when I ran my rdiff-backup
49 script, and unmounting everything at the end of it all. I eventually
50 gave up doing that and bought a separate drive for the Windows
51 partition, and encrypted all disk devices concerned with TrueCrypt.
52
53 --
54
55 The Doctor [412/724/301/703]
56
57 PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1
58 WWW: http://drwho.virtadpt.net/
59
60 "You leave Jack Burton alone!" --Egg Shen, _Big Trouble In Little China_

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-amd64] Encryption Solution Tom <uebershark@××××××××××.com>