LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 03-27-2011, 06:27 AM   #1
Phorize
Member
 
Registered: Sep 2005
Location: UK
Distribution: Slackware
Posts: 226

Rep: Reputation: 29
Best practice for laptop hdd encryption


Hello.

I have placed a pre-order at the slackware store for 13.37 and plan to do a clean install on my thinkpad (running 13.1 with encypted /home).

I am considering using a partition configuration which will be someting like:

sda1 /boot
sda2 extended
dev/xxx /swap encrypted
dev/yyy / encrypted
dev/zzz /home encrypted

I'll probably do it like suggested here:

http://slackware.osuosl.org/slackwar...ADME_CRYPT.TXT

I do have a couple of questions though:

1) Does anyone here use an encryption method that differs from the above-if so what are the advantages?

2) I'll be compiling my own kernel-is it strictly necessary to use an initrd if my kernel has lvm compiled into the kernel?
 
Click here to see the post LQ members have rated as the most helpful post in this thread.
Old 03-27-2011, 06:48 AM   #2
carltm
Member
 
Registered: Jan 2007
Location: Canton, MI
Distribution: CentOS, SuSE, Red Hat, Debian, etc.
Posts: 703

Rep: Reputation: 99
This method looks similar to what the Debian Installer uses. I
just selected to encrypt the disk and it created an unecrypted
/boot partition and it encrypted the rest of the disk.

If you compile your own kernel and you include all the right
drivers (such as lvm and dmcrpyt), you won't need an initrd.
Take a look at the output of lsmod to see if there are other
modules you might want to bake into the kernel.

Be sure that your kernel boots correctly before you remove
your current kernel from the boot menu!
 
1 members found this post helpful.
Old 03-27-2011, 07:22 AM   #3
Alien Bob
Slackware Contributor
 
Registered: Sep 2005
Location: Eindhoven, The Netherlands
Distribution: Slackware
Posts: 8,559

Rep: Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106
The initrd is required - not per se to contain kernel modules, but it has to contain the cryptsetup program plus a startup script that asks for your LUKS password so that the root filesystem can be unlocked before control over the system is handed over to the real Slackware "init".

That is what the mkinitrd program all takes care of for you.

Eric
 
4 members found this post helpful.
Old 03-27-2011, 01:03 PM   #4
Phorize
Member
 
Registered: Sep 2005
Location: UK
Distribution: Slackware
Posts: 226

Original Poster
Rep: Reputation: 29
Quote:
Originally Posted by carltm View Post
This method looks similar to what the Debian Installer uses. I
just selected to encrypt the disk and it created an unecrypted
/boot partition and it encrypted the rest of the disk.

If you compile your own kernel and you include all the right
drivers (such as lvm and dmcrpyt), you won't need an initrd.
Take a look at the output of lsmod to see if there are other
modules you might want to bake into the kernel.

Be sure that your kernel boots correctly before you remove
your current kernel from the boot menu!
Thank you for the offer of help; partitioning in slackware is different to debian, so I don't think that this would work.

Best,

Kris
 
Old 03-27-2011, 01:07 PM   #5
Phorize
Member
 
Registered: Sep 2005
Location: UK
Distribution: Slackware
Posts: 226

Original Poster
Rep: Reputation: 29
Quote:
Originally Posted by Alien Bob View Post
The initrd is required - not per se to contain kernel modules, but it has to contain the cryptsetup program plus a startup script that asks for your LUKS password so that the root filesystem can be unlocked before control over the system is handed over to the real Slackware "init".

That is what the mkinitrd program all takes care of for you.

Eric
Hi Eric,

Thank you for your response. I'll make sure that I use mkinitrd when I do this!

Kind regards,

Kris
 
Old 04-03-2011, 08:11 PM   #6
carltm
Member
 
Registered: Jan 2007
Location: Canton, MI
Distribution: CentOS, SuSE, Red Hat, Debian, etc.
Posts: 703

Rep: Reputation: 99
Thanks, Alien Bob. I learned something new.
 
Old 04-03-2011, 08:30 PM   #7
rob.rice
Senior Member
 
Registered: Apr 2004
Distribution: slack what ever
Posts: 1,076

Rep: Reputation: 205Reputation: 205Reputation: 205
a tip I would give you about lap tops is you never know when you will be with out your collection
of live cds or dvds installer disks what ever you use in a O/S disaster
I would suggest you have a back up installation on it's own partition that is not normaly mounted
with the data being kept on another partition mounted at every boot

so no matter badly messed up your normal installation your just a reboot from fixing it or carrying on
on your back up installation and fixing your normal installation later
 
1 members found this post helpful.
Old 04-04-2011, 02:31 AM   #8
Phorize
Member
 
Registered: Sep 2005
Location: UK
Distribution: Slackware
Posts: 226

Original Poster
Rep: Reputation: 29
Quote:
Originally Posted by rob.rice View Post
a tip I would give you about lap tops is you never know when you will be with out your collection
of live cds or dvds installer disks what ever you use in a O/S disaster
I would suggest you have a back up installation on it's own partition that is not normaly mounted
with the data being kept on another partition mounted at every boot

so no matter badly messed up your normal installation your just a reboot from fixing it or carrying on
on your back up installation and fixing your normal installation later
That's a good point. Generally I'm never without a usb live distro, so I should be ok.

Thanks
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Internal HDD password or encryption? matiasquestions Linux - Laptop and Netbook 3 06-17-2009 05:17 PM
Wireless encryption with Slackware 12.2 (WPA, WPA2): Best practice? gargamel Slackware 3 12-22-2008 03:42 PM
HDD Encryption Question richinsc Linux - Security 2 09-24-2008 06:17 AM
Advanced encryption on hdd Ephracis Linux - Security 1 05-09-2005 04:01 AM
hdd encryption on linux lolinux Linux - Software 2 10-24-2003 06:06 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 02:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration