Re: making encrypted $HOME as easy and convenient as possible
On 2011-09-12, Luca Capello <luca@pca.it> wrote:
> On Mon, 12 Sep 2011 06:50:29 +0200, martin f krafft wrote:
>> also sprach intrigeri <intrigeri+debian-devel@boum.org> [2011.09.11.2246 +0200]:
>>> The d-i already supports easy *full* system encryption, swap
>>> included.
>> I think this is what people should be using, not a high-level hack
>> like ecryptfs.
> +1, but if you use dm-crypt I still have not understood if SSD TRIM
> could be supported or not:
Apparently it's merged into 3.1. You might need to use dmsetup in the meantime
to set allow_discard. (See the kernel documentation bits for dm-crypt and
[0]).
Kind regards
Philipp Kern
[0] http://www.saout.de/pipermail/dm-crypt/2011-July/001825.html
Reply to: