Comments on: Home partition encryption with LUKS under Linux

By: WP GNU/Linux: Apartheid - Page 4 - Stormfront

WP GNU/Linux: Apartheid - Page 4 - Stormfront — Tue, 22 Mar 2011 17:30:56 +0000

[...] installation, but you can encrypt /home using cryptsetup in Synaptic post install, I think. Home partition encryption with LUKS under Linux | Robert Penz Blog There is also Truecrypt in Synaptic if you want to encrypt a partition. Anyway, I would advise [...]

By: robert

robert — Thu, 18 Jun 2009 20:32:07 +0000

@Jason: Ubuntu/Kubuntu does it your way if you choose it in the alternative install cd.

@Pennington: I use a default login if I’ve a luks home partition, as any attacker does not get to the real home directory and so I don’t need to enter the password two times. But pam_mount is also ok, just keep in mind that you don’t mount it 2 times (e.g. on every ssh login)

By: Donnie Pennington

Donnie Pennington — Sun, 11 Jan 2009 16:57:01 +0000

BTW the LUKS link you list doesn’t work. This one does (for now):

http://clemens.endorphin.org/LUKS

By: Donnie Pennington

Donnie Pennington — Sun, 11 Jan 2009 15:45:08 +0000

Thanks for your clear how-to. I used it to encrypt the SD card on my eeepc 900A as the home partition. Question: what do you think about using pam_mount?

By: Jason

Jason — Mon, 29 Dec 2008 19:34:32 +0000

I like to encrypt swap and /home, but not do full disk encryption (encrypt the LVM partition) as I find it does degrade performance a little. And I also like to keep an unencrypted /data partition around.

I have found it useful to make a small luks partition, I mount it as /private, I then put the passwords for my other encrypted partitions in there. That way I’m only prompted once at boot for a password, instead of for each partition.

It also gives you a good place to drop files that have passwords in plain text that would otherwise be in /etc (pptp).