This is a discussion on encryption at install within the Slackware Linux Support forums, part of the Unix Operating Systems category; --> Greetings, Is there a way to encrypt the swap, var, temp, and home partitions during install. I've done this ...
| |||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| |||
| none wrote: > Greetings, > > Is there a way to encrypt the swap, var, temp, and home partitions > during install. I've done this with Mandrake, but don't really want to > use mandrake... > Possibly. You'll need to mount them manually, and you may well need to make your own bootdisk. Build a kernel with cryptoloop support (I presume that's what you're using) on another system or your system running mandrake, and make a bootdisk from it. Try and fit everything into one <1.4mb kernel, you should be able to do it if you only include drivers for your hardware, and if necessary make non-essential things (sound, usb, anything you won't be using during install) as modules to install later. Write this kernel and the install.1 and install.2 images from /rootdisks on the slackware cd onto floppies. Boot from the kernel disk (with the cd in the drive) and insert install.1 and install.2 when prompted. Go through the installer partitioning and setup, but then quit, and remount your hierarchy under /mnt as encrypted filesystems. (back up anything on them first). Then restore the contents and edit /mnt/etc/fstab to use encryption. Then resume the install where you left off, it should all work. Say to use your current kernel, and install the modules by hand if you have any to install. Once you've booted your new system you may have to rebuild alsa. Good luck. |
| |||
| MikeyD <m_donaghy50@hotmail.com> wrote in news:41bc2832$0$52999$ed2619ec@ptn-nntp-reader03.plus.net: > none wrote: > >> Greetings, >> >> Is there a way to encrypt the swap, var, temp, and home partitions >> during install. I've done this with Mandrake, but don't really want >> to use mandrake... >> > Possibly. You'll need to mount them manually, and you may well need to > make your own bootdisk. Build a kernel with cryptoloop support (I > presume that's what you're using) on another system or your system > running mandrake, and make a bootdisk from it. Try and fit everything > into one <1.4mb kernel, you should be able to do it if you only > include drivers for your hardware, and if necessary make non-essential > things (sound, usb, anything you won't be using during install) as > modules to install later. Write this kernel and the install.1 and > install.2 images from /rootdisks on the slackware cd onto floppies. > Boot from the kernel disk (with the cd in the drive) and insert > install.1 and install.2 when prompted. Go through the installer > partitioning and setup, but then quit, and remount your hierarchy > under /mnt as encrypted filesystems. (back up anything on them first). > Then restore the contents and edit /mnt/etc/fstab to use encryption. > Then resume the install where you left off, it should all work. Say to > use your current kernel, and install the modules by hand if you have > any to install. Once you've booted your new system you may have to > rebuild alsa. Good luck. > Greetings, Thanks for the reply. Doesn't look to complex to do. I was thinking of using LoopAES, as I have used it in Mandrake. I'll go check out cryptoloop when I get a chance. Any idea how cryptoloop is speedwise? I took quite a speed hit with LoopAES on Mandrake. Thanks, Rush |
| ||||
| none wrote: > Greetings, > > Thanks for the reply. Doesn't look to complex to do. I was thinking of > using LoopAES, as I have used it in Mandrake. I'll go check out cryptoloop > when I get a chance. Any idea how cryptoloop is speedwise? I took quite a > speed hit with LoopAES on Mandrake. I think the speed hit will be similar. Cryptoloop has more algorithms and is forward-compatiable with dm-crypt, but is less mature than loop-aes, so loop-aes is probably better in the short term. Just patch the kernel you're building with loop-aes support. |