MEPIS Community Forum

Sure. Send an email to him at

dev AT mepis DOT org

and make the subject line very clear.

wouldn't be a bad thing to offer during install. i think there may be licensing issues that might prevent including truecrypt as part of the base install, though.

Having thought about it further I would have to add my vote to this request. There are people who definitely need the capability. If we can make that choice available so much the better.

Perhaps an installer could download it?

Really a very good idea. People can decide if they want to install it and there is at least a chance that it would be less likely to delay the release.

As I recall the first part of the Mepis acronym was "Management Education".

"Thou shalt Guard Thy Data" would seem to fit!

Thanks, I'll email him today.

cackerso

Morning cackerso

You may want him to consider the same encrypted drive and home partion that is already in Debian. I believe it is called an Encrypted LV Volume. It may be something he can do easily. I tried it in both Debian and Kubuntu. One may be both of those Distributions required an Alternative Installer to use those options. But the nice thing was it was done at install and required no addition downloads.

Well, I'm going to need some help here. I created the encrypted directory ok but I didn't understand the following commands and now at log in I'm asked for the encrypted volume pass phrase, which works, but then I get asked for the pass phrase for my old /home not the new encrypted one. So I can't log on.

Thanks,

cackerso

== Phase 3 ==

That went well, I hope! To ensure we work with the correct /home, let us create an empty file (old-home) in our current profile. It will help us differenciate the current user profile, from our to-be encrypted profile.

kbmonkey@bitwise:~$ touch ~/old-home

Now reboot with the *live* usb again. We just need to move the old /home out of the way. I'll wait here until you get back...

Back in the live environment now? Good, let us enter root mode -- please double-check your commands before you run smile

crunchbang@crunchbang:~$ sudo -i

mount / which contains the original unencrypted /home. Note that sda1 is where I installed / to, this is *not* our encrypted (sdaX) partition.

root@crunchbang:~# mkdir /mnt/disk && mount /dev/sda1 /mnt/disk/

If you had to ls /mnt/disk/home/USER you will see the file 'old-home', just an indication of which /home we are working with.

rename the unencrypted /home, so we still have it, but it won't be used by the OS anymore

root@crunchbang:~# mv /mnt/disk/home/ /mnt/disk/home_old

recreate the /home mount point, it is needed by fstab

root@crunchbang:~# mkdir /mnt/disk/home

finally, unmount

root@crunchbang:~# umount /mnt/disk

Done! You can now reboot into the installed env now.

Would it be possible for the moderators to move this to the security section? It seems to me there are probably people who watch that topic and have more experience with this drive encryption stuff and could respond to my latest problem. Thanks. On the other hand I figure people are pretty busy now dealing with the new MEPIS release and minor problems there.

cackerso