| View previous topic :: View next topic |
| Author |
Message |
menschmeier
l33t
Joined: 15 Dec 2004
Posts: 727
|
 Posted: Fri Mar 14, 2008 11:41 am Post subject: encrypt system with truecrypt |
 |
|
The truecrypt homepage says: | Quote: | | Note that TrueCrypt can encrypt an existing unencrypted system partition/drive in-place while the operating system is running (while the system is being encrypted, you can use your computer as usual without any restrictions). Likewise, a TrueCrypt-encrypted system partition/drive can be decrypted in-place while the operating system is running. You can interrupt the process of encryption or decryption anytime, leave the partition/drive partially unencrypted, restart or shut down the computer, and then resume the process, which will continue from the point it was stopped. |
How can this be done with Linux? What to change in /etc/fstab if I want to encrypt all partitions (/, /boot, /home, ...)? Unfortunately the truecrypt user guide is only M$ windows related. Does it work the same way with Linux?
Till today I am using truecrypt just for some containers. But encrypting the complete system might a little bit more sophisticated. I do not like to crash my system by doing this. Further if the whole system is encrypted the performance of the used encryption algorithm becomes more important. Any recommendations what filesystem, encryption algorithm, ... to use?
_________________
Please notice the back of this message. |
|
| Back to top |
|
 |
mantoo
Tux's lil' helper
Joined: 08 Dec 2007
Posts: 98
Location: Germany
|
| Posted: Fri Mar 14, 2008 12:52 pm Post subject: |
|
|
i also thought about that, so i decided to wait, until theres anything related to it on tc's website.
It did come to my mind to ask around here. So, i would like to know too 
mantoo |
|
| Back to top |
|
|
Aquiles
Apprentice
Joined: 23 Feb 2007
Posts: 230
Location: Somewhere, surrounded by my circumstances.
|
| Posted: Fri Mar 14, 2008 1:44 pm Post subject: |
|
|
Well, perhaps I missed the point here, but if what you want is to encrypt a filesystem that is already in use (for instance, your home folder), I guess you could firs make a copy of the home folder into some other place (another partition, an external drive..., whatever). Then encrypt the partition that holds the /home folder (and by doing this you will be destroying the data that was already there, that's why you first make the copy), and then move back the data into the encrypted volume. Then of course you have to mount the filesystem properly.
Regarding the eventual interruption of the encryption process... I don't think one can stop it and resume it later when you are using the "truecrypt -c" command... but I'm not an expert. Maybe it is a new feature in version 5.1.
_________________
Aquiles |
|
| Back to top |
|
|
mantoo
Tux's lil' helper
Joined: 08 Dec 2007
Posts: 98
Location: Germany
|
| Posted: Fri Mar 14, 2008 1:48 pm Post subject: |
|
|
Yes, this IS a new feature,
but seems to be 4 windows. i saw the feature which allowed u to do that in win-ver.
but in tc 5.1 or even 5.0 which also provided that feature for win didnt provide for linux |
|
| Back to top |
|
|
Havin_it
Veteran
Joined: 17 Jul 2005
Posts: 1272
Location: Edinburgh, UK
|
| Posted: Sun Apr 20, 2008 1:37 pm Post subject: |
|
|
Yep, looks like it is only in the Windows version for now. The option would appear on the first page of the Volume Creation Wizard if it were present, and there's nothing relating to it in the command-line options.
Truecrypt.org's docs don't tell us that much about how system drive encryption works, so I can't speculate how easy it would/will be to implement for other OSes. You'd think if they can make it play well with Winduhhhhs it should be a cakewalk to get it working with others, but maybe not. If anyone knows of a detailed run-down on how it works, please post it here as I'd like to know more. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
