Unix Technical Forum

encryption at install

This is a discussion on encryption at install within the Slackware Linux Support forums, part of the Unix Operating Systems category; --> Greetings, Is there a way to encrypt the swap, var, temp, and home partitions during install. I've done this ...


Go Back   Unix Technical Forum > Unix Operating Systems > Slackware Linux Support

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-19-2008, 06:15 PM
none
 
Posts: n/a
Default encryption at install

Greetings,

Is there a way to encrypt the swap, var, temp, and home partitions
during install. I've done this with Mandrake, but don't really want to
use mandrake...

Tia, Rush
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 02-19-2008, 06:15 PM
MikeyD
 
Posts: n/a
Default Re: encryption at install

none wrote:

> Greetings,
>
> Is there a way to encrypt the swap, var, temp, and home partitions
> during install. I've done this with Mandrake, but don't really want to
> use mandrake...
>

Possibly. You'll need to mount them manually, and you may well need to make
your own bootdisk. Build a kernel with cryptoloop support (I presume that's
what you're using) on another system or your system running mandrake, and
make a bootdisk from it. Try and fit everything into one <1.4mb kernel, you
should be able to do it if you only include drivers for your hardware, and
if necessary make non-essential things (sound, usb, anything you won't be
using during install) as modules to install later. Write this kernel and
the install.1 and install.2 images from /rootdisks on the slackware cd onto
floppies. Boot from the kernel disk (with the cd in the drive) and insert
install.1 and install.2 when prompted. Go through the installer
partitioning and setup, but then quit, and remount your hierarchy
under /mnt as encrypted filesystems. (back up anything on them first). Then
restore the contents and edit /mnt/etc/fstab to use encryption. Then resume
the install where you left off, it should all work. Say to use your current
kernel, and install the modules by hand if you have any to install. Once
you've booted your new system you may have to rebuild alsa. Good luck.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 02-19-2008, 06:16 PM
none
 
Posts: n/a
Default Re: encryption at install

MikeyD <m_donaghy50@hotmail.com> wrote in
news:41bc2832$0$52999$ed2619ec@ptn-nntp-reader03.plus.net:

> none wrote:
>
>> Greetings,
>>
>> Is there a way to encrypt the swap, var, temp, and home partitions
>> during install. I've done this with Mandrake, but don't really want
>> to use mandrake...
>>

> Possibly. You'll need to mount them manually, and you may well need to
> make your own bootdisk. Build a kernel with cryptoloop support (I
> presume that's what you're using) on another system or your system
> running mandrake, and make a bootdisk from it. Try and fit everything
> into one <1.4mb kernel, you should be able to do it if you only
> include drivers for your hardware, and if necessary make non-essential
> things (sound, usb, anything you won't be using during install) as
> modules to install later. Write this kernel and the install.1 and
> install.2 images from /rootdisks on the slackware cd onto floppies.
> Boot from the kernel disk (with the cd in the drive) and insert
> install.1 and install.2 when prompted. Go through the installer
> partitioning and setup, but then quit, and remount your hierarchy
> under /mnt as encrypted filesystems. (back up anything on them first).
> Then restore the contents and edit /mnt/etc/fstab to use encryption.
> Then resume the install where you left off, it should all work. Say to
> use your current kernel, and install the modules by hand if you have
> any to install. Once you've booted your new system you may have to
> rebuild alsa. Good luck.
>


Greetings,

Thanks for the reply. Doesn't look to complex to do. I was thinking of
using LoopAES, as I have used it in Mandrake. I'll go check out cryptoloop
when I get a chance. Any idea how cryptoloop is speedwise? I took quite a
speed hit with LoopAES on Mandrake.

Thanks, Rush
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 02-19-2008, 06:16 PM
MikeyD
 
Posts: n/a
Default Re: encryption at install

none wrote:

> Greetings,
>
> Thanks for the reply. Doesn't look to complex to do. I was thinking of
> using LoopAES, as I have used it in Mandrake. I'll go check out cryptoloop
> when I get a chance. Any idea how cryptoloop is speedwise? I took quite a
> speed hit with LoopAES on Mandrake.


I think the speed hit will be similar. Cryptoloop has more algorithms and is
forward-compatiable with dm-crypt, but is less mature than loop-aes, so
loop-aes is probably better in the short term. Just patch the kernel you're
building with loop-aes support.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 11:23 AM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.2.0
www.UnixAdminTalk.com