On 07/11/18 11:29, Pascal Hambourg wrote:
Le 10/07/2018 à 05:33, David Christensen a écrit :
In the Debian Installer, I choose 'manual' for 'partitioning
method', create a new partition table (MBR), and create three primary
partitions:
1 ~1 GiB btrfs mounted at /boot
2 ~2 GiB LUKS (random key) with swap
How do you do that ?
AFAIK, you cannot set a random key with LUKS, only with plain dm-crypt.
Perhaps it is plain dm-crypt, not LUKS. (I am not familiar with the
internals of either, so my understanding is that of a parrot or blind man.)
In the Debian Installer for Stretch:
1. For "Partitioning method", choose "Manual".
2. Create partitions, including a partition for swap.
3. Move the highlight to the swap partition and press Enter to invoke
the "Partition settings" pop-up dialog, and configure as follows (note
"Encryption key" => "Random key" setting):
Partition settings:
Use as physical volume for encryption
Encryption method Device-mapper (dm-crypt)
Encryption aes
Key size 256
IV algorithm xts-plain64
Encryption key Random key
Erase data yes