[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

etch installer and dm-crypt


during my next debian etch-install I want to give the facility to 
encrypt my hdd a try.

Now I read in the installation-howto, that it's recommended to set up 
one partition for every encrypted mount-point, like /var /tmp and /home.

This section of the howto
If you created encrypted volumes during the installation and assigned 
them mount points, you will be asked to enter the passphrase for each of 
these volumes during the boot. The actual procedure differs slightly 
between dm-crypt and loop-AES.
made me a little unhappy with this pocedure. If I understand this right, 
I would have to type a passphrase 4 times during the system boot:
3 times to access encrypted partitions and 1 time to login... this 
sounds a lot not userfriendly. 

Is there a way to set all this up, and to type the passphrase once for 
all the encrypted volumes? 
Or to make the system bootable with a key on a usb-stick inserted in 
it's slot during the boot? 

I didn't find very useful hints on the web. And if there is no 
practical solution, I think I'd better leave it all unencrypted... 

Any possibilities known here by anyone?


Reply to: