Re: FAQ about encrypting harddrive using key on USB key?
Ron Johnson <ron.l.johnson@cox.net>:
>
> On 12/08/07 01:30, Peter Kay wrote:
> >
> > I'm trying to set up my laptop with debian on an encrypted / partition
> > (and I'll have encrypted swap, too). I would like the encryption key
>
> http://luks.endorphin.org/
>
> Install cryptsetup and read /usr/share/doc/cryptsetup/CryptoRoot.HowTo.
Cool.
> Slightly OT, but do you *really* need /boot, /usr, /bin, etc, to be
> encrypted?
/boot is where grub/menu.lst is. Of course you know that it can
password protect itself. /usr contains /usr/local. /etc contains
both shadow and dhclient.conf, which contains the unique string my ISP
demands I hand to them when I connect.
If you're considering encrypting your hard drive, you're already
seriously security conscious (or paranoid), so extreme measures will
not appear expensive.
To the OP, grml.org has already done the Linux/Debian bit for you.
It's a Debian Sid downstream distro which specializes in this sort of
thing, slickly installing on usb keys, et al, with bleeding edge
software. I'd bet that'd be the quickest path.
--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://blinkynet.net/comp/uip5.html Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html Please, don't Cc: me.
Reply to: