/sbin/badblocks -c 10240 -s -w -t random -v /dev/sda5
Very interesting, very thorough. I'm going to try this out.
Thanks, great tutorial!
Worked fine Thanks to you i'm running crypted partitions again.
Kinda noob question: what is going on to performance after that tweak? I would try it, 'cause i'm a little bit paranoid about having mail archive and prawn collection on the same laptop, but not paranoid enough to tolerate noticeable lags and memory leak. Would 1 gb ram and 1600 khz be enough?
And how do I get access to my hypothetically encrypted /home partition after switching from !# to Arch or Sabayon?
Last edited by tartan (2009-09-03 06:34:01)
sudo cryptsetup luksOpen /dev/sda8 sda8crypt
Hi! Thanks for the great HOWTO. It works great. But I do have a tiny little problem with it:
Before encryption I created /dev/sda5 as my SWAP with the size 2500 MB. After encryption and installation it only shows up with 501 MB. The command "free" and "cat /proc/swaps" show also only 513 MB. I checked the partition and it's definetly the correct one with 2500 MB.
Do you have any ideas what went wrong?
Thanks in advance.
Last edited by seespatz (2009-10-23 06:33:23)
I just changed the HOWTO to fit my partitions (but maybe, I made a mistake following it). I guess you are right, the swap is not activated at boot. But it gets mounted.
control sda2crypt sda5crypt
sda5crypt is the swap partition.
shows /dev/ramzswap0 with size 513380. I suppose that would be the small swapfile created by !#.
I found out that I can get my swap to work with
sudo swapon /dev/mapper/sda5crypt
shows 2 swaps: the one mentioned above AND my swap with the size 2441840. So it seems it is just not activated during boot. Do you have a suggestion? My idea is now (if there is no other way) to write a swapoff for the small one and a swapon for my one into austostart ...
Last edited by seespatz (2009-10-23 09:03:56)
Digging up an old topic, but looks like a great one!
Tried it yesterday, but failed since I did not understand that the installer should be started from the live session, in stead of booting anew. Want to give it a shot when I have the time later today.
Just wanted to know if the same (multiple encrypted partitions among which swap and root with a single password) can be achieved through the new LVM setup of the installer? Is there a way to get a longer key than 256, BTW?
Last edited by jvd (2011-03-08 20:40:10)
EF@Spoonbill:~$ sudo /etc/init.d/cryptdisks start
Enjoying a good !#
The first post does not apply to Debian Squeeze, apparently only to the 9.04 ubuntu versions, as there is no possibility to install debian from a running live session.
You can make the encryption of multiple disks all happen from the debian installer. Be prepared to spend quite some time in the not so intuitive partitioning tool.
The least intuitive part for me was to select Finish after creating the encrypted volume, before moving on to creating the LVM that contains the other partitions. Make sure you enter your passphrase before getting to the LVM phase...
The only problem I am having is getting sda4 (a data drive) to recognise the passphrase entered during boot for sda2 (swap). I didn't bother with all the Live CD stuff as my !# exists currently.
Is there an alternative encryption method? All I am after is having a swap, data and home drive encrypted and mounted at boot - pref with home being mounted to the right user akin to Mint.
Enjoying a good !#
Sorry, did not read your post well enough...
Not so sure, as I have not attempted to create encrypted disks after installation. Have not really looked under the hood of what is really happening, and cannot help you concretely, I am afraid