MEPIS Community Forum

A Linux operating system based on Debian Stable
View unanswered posts | View unsolved topics | View active topics |



Reply to topic  [ 24 posts ]  Go to page Previous  1, 2, 3  Next
How to encrypt swap and home partitions? 
Author Message
Forum Veteran
Forum Veteran
User avatar

Joined: Wed Jul 19, 2006 6:13 am
Posts: 10178
Location: Geneva NY
Has thanked: 2926 times
Have thanks: 1889 times
Post # 269755
Post Re: How to encrypt swap and home partitions?
Quote:
Is it possible to make a formal request to Warren to add the ability to encrypt /home at installation? How would I do this?
Sure. Send an email to him at

dev AT mepis DOT org

and make the subject line very clear.

_________________
Production: 32 bit, 3.14-0.bpo.1-686-pae. MX-14.2, AMD FX-4130 Quad-Core, GeForce GT 630/PCIe/SSE2, 8 GB DDR3, / and /home on Kingston SSD 120 GB, data on WesternDigital 1TB, Dell SP2309W monitor.


Sat Apr 16, 2011 12:33 pm

Jerry3904 thanked by: cackerso
Profile
Forum Guide
Forum Guide
User avatar

Joined: Mon Jun 30, 2008 8:06 pm
Posts: 2952
Has thanked: 52 times
Have thanks: 376 times
Post # 269759
Post Re: How to encrypt swap and home partitions?
wouldn't be a bad thing to offer during install. i think there may be licensing issues that might prevent including truecrypt as part of the base install, though.


Sat Apr 16, 2011 12:59 pm
Profile
Forum Regular
Forum Regular
User avatar

Joined: Wed Aug 30, 2006 1:44 am
Posts: 606
Location: Midway between the Washington State rainforest, ocean and volcanoes
Has thanked: 773 times
Have thanks: 69 times
Post # 269766
Post Re: How to encrypt swap and home partitions?
GoManutd wrote:
wouldn't be a bad thing to offer during install. i think there may be licensing issues that might prevent including truecrypt as part of the base install, though.


timkb4cq wrote:
TrueCrypt is not in the repositories because its license does not allow redistribution. You have to download it from their site.

viewtopic.php?f=40&t=29340&hilit=truecrypt


Sat Apr 16, 2011 3:07 pm
Profile
Forum Regular
Forum Regular
User avatar

Joined: Wed Dec 02, 2009 12:28 pm
Posts: 130
Location: Loveland, CO
Has thanked: 1 time
Have thanks: 17 times
Post # 269777
Post Re: How to encrypt swap and home partitions?
Having thought about it further I would have to add my vote to this request. There are people who definitely need the capability. If we can make that choice available so much the better.


Sat Apr 16, 2011 3:54 pm
Profile
Forum Veteran
Forum Veteran
User avatar

Joined: Wed Jul 12, 2006 5:54 am
Posts: 10920
Location: Tulsa, Oklahoma U.S.A.
Has thanked: 3668 times
Have thanks: 887 times
Post # 269805
Post Re: How to encrypt swap and home partitions?
Perhaps an installer could download it?

_________________
Yes, even I am dishonest. Not in many ways, but in some. Forty-one, I think it is.
--Mark Twain


Sat Apr 16, 2011 7:08 pm
Profile
Forum Regular
Forum Regular
User avatar

Joined: Wed Dec 02, 2009 12:28 pm
Posts: 130
Location: Loveland, CO
Has thanked: 1 time
Have thanks: 17 times
Post # 269813
Post Re: How to encrypt swap and home partitions?
Really a very good idea. People can decide if they want to install it and there is at least a chance that it would be less likely to delay the release.

As I recall the first part of the Mepis acronym was "Management Education".

"Thou shalt Guard Thy Data" would seem to fit!


Sat Apr 16, 2011 8:02 pm
Profile
Forum Regular
Forum Regular

Joined: Wed Nov 14, 2007 5:22 pm
Posts: 153
Location: Los Angeles area
Has thanked: 10 times
Have thanks: 4 times
Post # 269853
Post Re: How to encrypt swap and home partitions?
Thanks, I'll email him today.

cackerso


Sun Apr 17, 2011 2:24 pm
Profile
Forum Regular
Forum Regular
User avatar

Joined: Fri Sep 10, 2010 3:30 pm
Posts: 250
Location: PALM BAY, FLORIDA U.S.A.
Has thanked: 38 times
Have thanks: 32 times
Post # 269934
Post Re: How to encrypt swap and home partitions?
Morning cackerso

You may want him to consider the same encrypted drive and home partion that is already in Debian. I believe it is called an Encrypted LV Volume. It may be something he can do easily. I tried it in both Debian and Kubuntu. One may be both of those Distributions required an Alternative Installer to use those options. But the nice thing was it was done at install and required no addition downloads.

_________________
Until the next time we meet thank you for taking the time out of your day to visit
with me. I enjoyed spending time with you.

Frank D. Hubeny


Mon Apr 18, 2011 8:37 am
Profile
Forum Regular
Forum Regular

Joined: Wed Nov 14, 2007 5:22 pm
Posts: 153
Location: Los Angeles area
Has thanked: 10 times
Have thanks: 4 times
Post # 272051
Post Re: How to encrypt swap and home partitions?
Well, I'm going to need some help here. I created the encrypted directory ok but I didn't understand the following commands and now at log in I'm asked for the encrypted volume pass phrase, which works, but then I get asked for the pass phrase for my old /home not the new encrypted one. So I can't log on.

Thanks,

cackerso

== Phase 3 ==

That went well, I hope! To ensure we work with the correct /home, let us create an empty file (old-home) in our current profile. It will help us differenciate the current user profile, from our to-be encrypted profile.

kbmonkey@bitwise:~$ touch ~/old-home

Now reboot with the *live* usb again. We just need to move the old /home out of the way. I'll wait here until you get back...

Back in the live environment now? Good, let us enter root mode -- please double-check your commands before you run smile

crunchbang@crunchbang:~$ sudo -i

mount / which contains the original unencrypted /home. Note that sda1 is where I installed / to, this is *not* our encrypted (sdaX) partition.

root@crunchbang:~# mkdir /mnt/disk && mount /dev/sda1 /mnt/disk/

If you had to ls /mnt/disk/home/USER you will see the file 'old-home', just an indication of which /home we are working with.

rename the unencrypted /home, so we still have it, but it won't be used by the OS anymore

root@crunchbang:~# mv /mnt/disk/home/ /mnt/disk/home_old

recreate the /home mount point, it is needed by fstab

root@crunchbang:~# mkdir /mnt/disk/home

finally, unmount

root@crunchbang:~# umount /mnt/disk

Done! You can now reboot into the installed env now.


Wed May 04, 2011 1:04 pm

cackerso thanked by: lucky9
Profile
Forum Regular
Forum Regular

Joined: Wed Nov 14, 2007 5:22 pm
Posts: 153
Location: Los Angeles area
Has thanked: 10 times
Have thanks: 4 times
Post # 272683
Post Re: How to encrypt swap and home partitions?
Would it be possible for the moderators to move this to the security section? It seems to me there are probably people who watch that topic and have more experience with this drive encryption stuff and could respond to my latest problem. Thanks. On the other hand I figure people are pretty busy now dealing with the new MEPIS release and minor problems there.

cackerso


Sun May 08, 2011 2:31 pm
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 24 posts ]  Go to page Previous  1, 2, 3  Next

Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by STSoftware for PTF.