| 1 |
On 8/13/06, John J. Foster <Gentoo-User@××××××××××××.com> wrote: |
| 2 |
> Ok, this looks like a setup I'd be pleased with. Right now I have |
| 3 |
> |
| 4 |
> / |
| 5 |
> /boot |
| 6 |
> swap |
| 7 |
> |
| 8 |
> How much of a pain will it be to implement now? Or will I be better off |
| 9 |
> waiting about 6 months till I get a laptop, and then following the guide |
| 10 |
> at |
| 11 |
> |
| 12 |
> http://gentoo-wiki.com/SECURITY_System_Encryption_DM-Crypt_with_LUKS |
| 13 |
|
| 14 |
This guide seems reasonable. I think the current live CD includes the |
| 15 |
version of cryptsetup that understands LUKS though, so it shouldn't be |
| 16 |
necessary to download that. And I prefer to randomize the disk by |
| 17 |
encrypting with a random password before I setup the actual mapping. |
| 18 |
|
| 19 |
If you want to get started on this before your new laptop arrives, I |
| 20 |
suggest starting with the initramfs and encrypting swap only. You |
| 21 |
should be able to create an initramfs that will setup the mapping and |
| 22 |
do the swapon before your root filesystem mounts. Once you have that |
| 23 |
working, and are comfortable with how the initramfs works, you can |
| 24 |
move on to your root filesystem. |
| 25 |
|
| 26 |
Cheers, |
| 27 |
-Richard |
| 28 |
-- |
| 29 |
gentoo-user@g.o mailing list |
Archives