Re: FAQ about encrypting harddrive using key on USB key?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/08/07 01:30, Peter Kay wrote:
Hello everyone,

I'm trying to become a new debian user, and am still kinda fuzzy on
where the best place to go for FAQs and help are, so bear with me...

I'm trying to set up my laptop with debian on an encrypted / partition
(and I'll have encrypted swap, too). I would like the encryption key
to be stored on an encrypted USB drive that can boot enough of the
system to run debian. So I want to need 2 things to boot: the USB
stick (which will be bootable and take control from the OS) and a
passphrase to unencrypt the USB drive.

I had found a FAQ on how to do this a long time ago, but my desktop
died, so I lost the link. Searching recently, I found what seemed to be
an appropriate link to it (using google) on http://debianhelp.org/, but that
website seemed to be down, so I'm not sure where to go.

In the meantime, of course, the cat ate my power cable (again), so my
laptop is currently DOA and I lost my 1st attempt to post this, but once
I get a replacement adapter, I'd like to get debian up and running!

Does anyone know of a mirror to debianhelp.org, or what happened to it?

Is there a different FAQ I should be using?

Thanks all, and I hope to soon join you in debian-land.

http://luks.endorphin.org/

Install cryptsetup and read /usr/share/doc/cryptsetup/CryptoRoot.HowTo.

Slightly OT, but do you *really* need /boot, /usr, /bin, etc, to be
encrypted?

ISTM that only /home, /tmp & swap files/partitions (and /var?) need
be partitioned. That way, you could still boot the machine and do
maintenance if you misplaced your dongle.

- --
Ron Johnson, Jr.
Jefferson LA USA

"Your mistletoe is no match for my TOW missile." Santa-bot
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHWtg0S9HxQb37XmcRAqQuAJ4pyHVoxZOsFuwjOwrF9/xYuFq2hgCgiU07
Npaiu9s9AenYIphLMjUyfZg=
=Ivaw
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx



Relevant Pages

  • FAQ about encrypting harddrive using key on USB key?
    ... I'm trying to set up my laptop with debian on an encrypted / partition ... I would like the encryption key ... Is there a different FAQ I should be using? ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: stable-testing-unstable (Re: Newest kde onto stable)
    ... we can integrate it to the Debian ... > there is in your FAQ. ... You want to link to a page with a big "What is Knoppix" paragraph on it. ... Newbies should avoid these people like the plague. ...
    (Debian-User)
  • stable-testing-unstable (Re: Newest kde onto stable)
    ... changing the flavour of debian distribution. ... where your FAQ should be incorporated, ... it's best to install Debian in the first place" or "from ... I would be happy to incorporate. ...
    (Debian-User)
  • Re: startup/boot links
    ... >> Is there a tool similar to redhat's chkconfig managing startup scripts ... >> for debian? ... > FAQ ever. ... Heh, nah, the most frequently asked question has to be "I tried to apt-get ...
    (Debian-User)
  • Re: X config not written
    ... Carl Fink wrote: ... >> in the Debian X FAQ. ... they want to edit it. ...
    (Debian-User)