Full disk encryption
Re: Full disk encryption
I reduced the password by enable lightdm auto login. So I only need one password.
It's also secure, because it always need the password for encryption.
It's also secure, because it always need the password for encryption.
Powered on: MX 17 Horizon x86_64
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Re: Full disk encryption
It looks like this is a problem at the most distributions.c4os wrote: ↑Sun Jun 24, 2018 9:15 am Ok, then I did it right.
Why copy all these folder and not "/bin/cp -a /live/aufs /mnt/antiX"?
Doesn't matter, main thing it works.
I got a couble of questions. How do you calculate the swap space, or do you create a swap file?
Can you send me the correct github link for the installer? I found mx-test-installer and mx-installer.
Can you recommend a good code reader/editor?
About the issues, changing the /lib/cryptsetup/cryptdisk.functions makes no sense, because it will be overwritten on updates.
I saw the installed version is 1.7.3. The actual version is 2.0.3.
https://gitlab.com/cryptsetup/cryptsetup
May we have to update to fix the "remaining" warning.
It is possible to reduce the timeout with changing the line in /lib/cryptsetup/cryptdisk.functions:
Code: Select all
# for i in 1 2 4 8 16 32; do
for i in 0.001; do
Powered on: MX 17 Horizon x86_64
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Re: Full disk encryption
That might be a good option, I wonder if it reduces the security when the computer goes to sleep (does it still ask for password?) or if you log out.
Re: Full disk encryption
You're right! Suspend doesn't ask for a password. Hibernate locks the display after resume. There's a option at energy settings/system.
But I saw the display content for one second until the screensaver locks. So far I don't suspend, but after I played around, I like it and will use this feature more.
So better to disable the autologin! ;-)
Powered on: MX 17 Horizon x86_64
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Re: Full disk encryption
There's no difference between login and autologin! After I disabled the autologin suspend doesn't ask for a password. Hibernate locks the display after resume.c4os wrote: ↑Mon Aug 27, 2018 3:31 amYou're right! Suspend doesn't ask for a password. Hibernate locks the display after resume. There's a option at energy settings/system.
But I saw the display content for one second until the screensaver locks. So far I don't suspend, but after I played around, I like it and will use this feature more.
So better to disable the autologin! ;-)
I that normal? I haven't much experience about suspend and I'have installed my system manually with FDE.
Powered on: MX 17 Horizon x86_64
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
Hardware: Dell Latitude E4300 - CPU: Intel Core 2 Duo P9600 (2) @ 2.535GHz - Memory: 4GB
Style: Resolution: 1280x800 - WM Theme: Balou - Theme: Blackbird [GTK2/3] - Icons: Papirus-Dark [GTK2]
-
- Posts: 56
- Joined: Wed Dec 20, 2017 10:41 am
Re: Full disk encryption
Our office had an edict come down that everything needed full-disk encryption, so I had to switch distros on a couple of my machines. Let me know if you need someone to test the installer when y'all add this, though. :)
--Ben
Re: Full disk encryption
No one who is using more than one OS on the same computer wants the whole disk to be encrypted, that makes no sense.
For that reason the expression "full disk encryption" should be changed into "system encryption" or something similar which makes clear that the whole system, including /root, /data, /swap, and /boot is encrypted.
For that reason the expression "full disk encryption" should be changed into "system encryption" or something similar which makes clear that the whole system, including /root, /data, /swap, and /boot is encrypted.
-
- Posts: 16
- Joined: Wed Dec 16, 2015 10:21 am
Re: Full disk encryption
Hi,
I'd like to encrypt my system. I'd like to have as much as possible in one btrfs-filesystem in different subvolumes, so I don't need to decide about the size of the partitions and I can easily make backups and having rollbacks of the system. I'm reading a lot through the Archwiki. However, I'm having some questions, since this stuff is really complex:
- For what do I even need LVM when I'm using btrfs inside of a LUKS device?
- Does MX Linux not support Grub2 Bootloader? Grub seems only to work with LUKS, but not LUKS2. Advantages of LUKS2 here (scrolling down a little).
- Maybe a strange idea: Can I somehow have a some container, move the data from my Windows-8 partition into a virtual partition inside and then also have a LUKS partition for my Linux inside, and also having the boot encrypted? So I could use the space I don't use for Windows for Linux (outside of LUKS) until Windows needs more space? This would be close to perfect.
I'd like to encrypt my system. I'd like to have as much as possible in one btrfs-filesystem in different subvolumes, so I don't need to decide about the size of the partitions and I can easily make backups and having rollbacks of the system. I'm reading a lot through the Archwiki. However, I'm having some questions, since this stuff is really complex:
- For what do I even need LVM when I'm using btrfs inside of a LUKS device?
- Does MX Linux not support Grub2 Bootloader? Grub seems only to work with LUKS, but not LUKS2. Advantages of LUKS2 here (scrolling down a little).
- Maybe a strange idea: Can I somehow have a some container, move the data from my Windows-8 partition into a virtual partition inside and then also have a LUKS partition for my Linux inside, and also having the boot encrypted? So I could use the space I don't use for Windows for Linux (outside of LUKS) until Windows needs more space? This would be close to perfect.
Acer Extensa 2519 with 4GB RAM v: V1.24 | Intel Celeron N3060 2.4 GHz | Intel HD Graphics 400 (Braswell)
Re: Full disk encryption
MX-17.1 has only Home folder encryption option. Full disk encryption is going to be in MX-18 which is going to be released before the end of the year. As for Grub I highly recommend you don't try Grub2 on MX-17.1 unless you want to break MX Linux.darth.severus wrote: ↑Sun Dec 09, 2018 10:18 pm Hi,
I'd like to encrypt my system. I'd like to have as much as possible in one btrfs-filesystem in different subvolumes, so I don't need to decide about the size of the partitions and I can easily make backups and having rollbacks of the system. I'm reading a lot through the Archwiki. However, I'm having some questions, since this stuff is really complex:
- For what do I even need LVM when I'm using btrfs inside of a LUKS device?
- Does MX Linux not support Grub2 Bootloader? Grub seems only to work with LUKS, but not LUKS2. Advantages of LUKS2 here (scrolling down a little).
- Maybe a strange idea: Can I somehow have a some container, move the data from my Windows-8 partition into a virtual partition inside and then also have a LUKS partition for my Linux inside, and also having the boot encrypted? So I could use the space I don't use for Windows for Linux (outside of LUKS) until Windows needs more space? This would be close to perfect.
I am command line illiterate. I copy & paste to the terminal. Liars, Wiseguys, Trolls, and those without manners will be added to my ignore list.
Re: Full disk encryption
I didn't know there were more than 1 grub version 2's. :)
MX Linux has
. . . . .grub-pc_2.02~beta3-5+deb9u1 and
grub2-common_2.02~beta3-5+deb9u1,
but not
. . . . . . grub2_2.02~beta3-5+deb9u1
MX Linux has
. . . . .grub-pc_2.02~beta3-5+deb9u1 and
grub2-common_2.02~beta3-5+deb9u1,
but not
. . . . . . grub2_2.02~beta3-5+deb9u1
Last edited by Richard on Mon Dec 10, 2018 1:14 am, edited 3 times in total.
Thinkpad T430 & Dell Latitude E7450, both with MX-21.3.1
kernal 5.10.0-26-amd64 x86_64; Xfce-4.18.0; 8 GB RAM
Intel Core i5-3380M, Graphics, Audio, Video; & SSDs.
kernal 5.10.0-26-amd64 x86_64; Xfce-4.18.0; 8 GB RAM
Intel Core i5-3380M, Graphics, Audio, Video; & SSDs.