Add Comment

You are not currently logged in. If you do not have a user account then please consider creating one and logging in before you post your comment. This will allow you to track replies to your comment, and take part in the site much more freely.

To add your comment, fill in all the boxes below and then preview it to make sure you're happy with the way that it looks.

This is the comment you were replying to, attached to the article Unlocking a LUKS encrypted root partition via ssh:


Re: Unlocking a LUKS encrypted root partition via ssh
Posted by Anonymous (130.126.xx.xx) on Thu 7 Feb 2008 at 16:54
Another method is to create a 3 partitions on the hard drive, one for /boot, one for swap, and one for the encrypted root luks,lvm combination.

Then install a minimal (unencrypted) debian to the swap space. Then log in to this debian, set up the luks partition, set up lvm, and use debootstrap to install a second copy of debian in the encrypted container.

Then boot into the encrypted container, then wipe the swap partition
dd if=/dev/urandom of=/dev/hda2 whatever...
and then set up an encrypted swap space in /etc/crypttab. Make the swap space use /dev/urandom as a key.

This way, everything is encrypted in the end, but you have an intermediate install that allows you to configure the encrypted root and boot drives before you actually boot into them for the first time.

Username:Anonymous
Title:
Your Comment:

Posting Format:

 

Inappropriate comments will be removed.

Some help on entry formatting is available

User Login

Username:

Password:

[ Advanced Login ]

Register Account

Quick Site Search