[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: encrypting an external HDD filesystem and GNOME3 support



HI Jon,

I've been using truecrypt (available for windows, mac and linux) for a
while without problems. It works as a file inside a partiiton on any
available system (lvm or not) and can be installed even using fat or
other basic filesystems.

The solutions uses a graphical interface, and can be scripted if you
are a more adventurous guy.

It appears as a disk in nautilus too.

You have other solutions, like block encription using the kernel, but
I've not been using that for a few years, so I prefer to let other
users more experienced or with fresh memory explain this other
solution.

Best regards.



On 24 April 2012 23:44, Jon Dowland <jmtd@debian.org> wrote:
> Hi,
>
> I am interested in creating an encrypted partition (ideally
> LVM logical volume) on an external disk, which I will want
> to attach and detach from my laptop whilst running.  I use
> the GNOME3 environment and am looking for a robust solution
> which doesn't require too much fuss.
>
> It would appear that GNOME3/nautilus/udisks (or some
> combination thereof) has some rudimentary support for
> detecting and mounting LVM volume groups, logical
> volumes and dm_crypt devices. However the dm_crypt+LVM
> combination doesn't work well yet, at all (what happens
> is described below)
>
> My question is, does anyone currently achieve a
> hot-pluggable, encrypted filesystem, accessible with the
> minimum of fuss via a modern GUI environment, and if so,
> what do they use?
>
> Thanks in advance for any answers.
>
> (details about how well LVM/dm_crypt and GNOME3 play
> together follow)
>
> If I plug a disk with an LVM-formatted partition, an icon
> for the VG appears in nautilus. Clicking on that requires
> user authentication, after which an icon appears for the
> LVs within.
>
> For a plain (non-encrypted) LV, double-clicking that
> requires another user authentication, upon which the LV
> is mounted.
>
> For an encrypted LV, double-clicking it prompts for a
> decryption passphrase, then follows up with an
> authentication prompt (as above).
>
> I then get an error message ("Internal error: No mount
> object for mounted volume") and a pop-up telling me that
> a filesystem has appeared simultaneously.  The filesystem
> appears to be mounted.  However, when you unmount the volume
> in nautilus, the dm_crypt device is not properly closed.
>
> It would appear that LVM/dm_crypt are not adequately
> supported in the desktop stack yet, but that they probably
> will be soon.  The two auth prompts in the non-encrypted
> case may be possible to configure away via policykit.
>
> ii  gnome-shell    3.2.2.1-2
> ii  nautilus       3.2.1-3
> ii  udisks         1.0.4-5
> ii  lvm2           2.02.88-2
> ii  cryptsetup     2:1.4.1-2
>
>
> --
> Jon Dowland
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: 20120424214438.GA20676@debian">http://lists.debian.org/20120424214438.GA20676@debian
>



-- 
_______________________________________

Josep Llauradó Selvas

josep.llaurado AT gmail.com
_______________________________________


Reply to: