[nlug] topic ideas
Greetings, Lately, I have been seeing the NoSQL maintain if not pick up even more steam recently. I know for certain I have chatted with fellow NLUGgers (if that's a word) about the NoSQL style databases (Mongo and couch specifically come to mind). I was wondering if that's a subject that this group would be interested in hearing about. I wouldn't mind presenting on it, but I would love to have someone else help with such a presentation. My only exposure to NoSQL is through the lense of Ruby. Andrew McElroy -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
[nlug] Full disk encryption on Linux?
Are there any nice full disk encryption systems for Linux? (How-To's would be appreciated) I'm familiar with TrueCrypt and it supports full disk encryption on Windows, but I haven't seen any guides for using something like that to do full disk encryption (or full partition encryption) on Linux. Any ideas? Thanks, Chris -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
I think you may be running into a marketing problem. On windows they gloss over what is encrypted as they are like linux and need some portion not encrypted to boot from. http://www.linux.org/docs/ldp/howto/Encrypted-Root-Filesystem-HOWTO/preparing-system.html On linux systems you will encrypt partitions, and you will still need to leave enough on an unencrypted partition to boot from and prepare the system to start decrypting. So if you are used to making a 500-200mb boot partition, you can cram a few different kernels and the initramdisk on the one partition to start up, ask for a decryption key and then mount the rest of the drives. - Original Message - Are there any nice full disk encryption systems for Linux? (How-To's would be appreciated) I'm familiar with TrueCrypt and it supports full disk encryption on Windows, but I haven't seen any guides for using something like that to do full disk encryption (or full partition encryption) on Linux. Any ideas? Thanks, Chris -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en -- Steven Critchfield cri...@basesys.com -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
On 11/01/2010 03:42 PM, Chris McQuistion wrote: Are there any nice full disk encryption systems for Linux? (How-To's would be appreciated) I don't have too much experience with full disk encryption, but I believe what you're looking for is a dm-crypt/LUKS setup. You can probably cannibalize most of this howto for another distro: https://wiki.archlinux.org/index.php/System_Encryption_with_LUKS_for_dm-crypt Regards, -- John Wolfe Developer System Administrator, OnWav: http://www.onwav.com Desk Phone: (931)-881-1542 | Mobile Phone: (931)-284-9789 -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
Are you doing a fresh install or planning to encrypt an existing OS? I'm sure others do too, but I know for sure Ubuntu and Centos have options for full disk encryption on install. I believe Ubuntu requires the alternate-install disk. I've only done http installs for Centos, so I can't say for sure the encryption option is there with a disk install. -Charlie On Mon, Nov 1, 2010 at 3:58 PM, John Wolfe b...@onwav.com wrote: On 11/01/2010 03:42 PM, Chris McQuistion wrote: Are there any nice full disk encryption systems for Linux? (How-To's would be appreciated) I don't have too much experience with full disk encryption, but I believe what you're looking for is a dm-crypt/LUKS setup. You can probably cannibalize most of this howto for another distro: https://wiki.archlinux.org/index.php/System_Encryption_with_LUKS_for_dm-crypt Regards, -- John Wolfe Developer System Administrator, OnWav: http://www.onwav.com Desk Phone: (931)-881-1542 | Mobile Phone: (931)-284-9789 -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
I have an existing CentOS installation and need to encrypt certain partitions. Encrypting after the fact would be my preference, as re-installing this system would be rather complicated. Chris On Mon, Nov 1, 2010 at 4:00 PM, charlie mtsuchar...@gmail.com wrote: Are you doing a fresh install or planning to encrypt an existing OS? I'm sure others do too, but I know for sure Ubuntu and Centos have options for full disk encryption on install. I believe Ubuntu requires the alternate-install disk. I've only done http installs for Centos, so I can't say for sure the encryption option is there with a disk install. -Charlie On Mon, Nov 1, 2010 at 3:58 PM, John Wolfe b...@onwav.com wrote: On 11/01/2010 03:42 PM, Chris McQuistion wrote: Are there any nice full disk encryption systems for Linux? (How-To's would be appreciated) I don't have too much experience with full disk encryption, but I believe what you're looking for is a dm-crypt/LUKS setup. You can probably cannibalize most of this howto for another distro: https://wiki.archlinux.org/index.php/System_Encryption_with_LUKS_for_dm-crypt Regards, -- John Wolfe Developer System Administrator, OnWav: http://www.onwav.com Desk Phone: (931)-881-1542 | Mobile Phone: (931)-284-9789 -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.comnlug-talk%2bunsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.comnlug-talk%2bunsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
On Mon, Nov 01, 2010 at 04:10:21PM -0500, Chris McQuistion wrote: I have an existing CentOS installation and need to encrypt certain partitions. Encrypting after the fact would be my preference, as re-installing this system would be rather complicated. To the best of my knowledge you can not use cryptsetup to encrypt an existing file system; the create / format operations will wipe the existing data. There may have been some movement in this area I am unaware of, but I've not come across anything recently. John -- The things that will destroy America are prosperity-at-any-price, peace-at-any-price, safety-first instead of duty-first, the love of soft living, and the get-rich-quick theory of life. -- Teddy Roosevelt pgpfa3zlIa96d.pgp Description: PGP signature
Re: [nlug] Full disk encryption on Linux?
Hello Gang: I am currently running my ancient DELL Inspiron 2650 system using Debian Linux 5.0 That is using Encrypted LVM partitioning. The option is a bit tricky to set up using the Debian Live Boot Disk that after configuring the system downloads additional packages via the internet/arpanet. I would suggest that you use a disk that is 'clean', meaning not having important data. So I would warn those that are not familiar with the setup, make a complete backup that can install from a new blank hard disc. Basically with encryption programs can encrypt partitions cra...@magnolia-grove:/sbin$ sudo pvscan sudo: unable to resolve host magnolia-grove PV /dev/dm-0 VG magnolia-grove lvm2 [27.70 GB / 0free] Total: 1 [27.70 GB] / in use: 1 [27.70 GB] / in no VG: 0 [0 ] cra...@magnolia-grove:/sbin$ sudo lvscan sudo: unable to resolve host magnolia-grove ACTIVE'/dev/magnolia-grove/root' [332.00 MB] inherit ACTIVE'/dev/magnolia-grove/usr' [4.66 GB] inherit ACTIVE'/dev/magnolia-grove/var' [2.79 GB] inherit ACTIVE'/dev/magnolia-grove/swap_1' [1.07 GB] inherit ACTIVE'/dev/magnolia-grove/tmp' [380.00 MB] inherit ACTIVE'/dev/magnolia-grove/home' [18.48 GB] inherit cra...@magnolia-grove:/sbin$ sudo vgscan sudo: unable to resolve host magnolia-grove Reading all physical volumes. This may take a while... Found volume group magnolia-grove using metadata type lvm2 FMI, I would 1. search for encryption programs. 2. document what is on the partitions you want to encrypt. 3. document what pgp/ passphrase you want to use for the system, and if you have to write it down in morse code and place it in your safe. 4. get new clean disk 5. if you have LVM on your system you can add a new PV - physical volume. using a boot disk with lvmtools 6. Then you can use lvmtools to move your logical volumes and volume groups to expand an old vg / lg , add a new vg/ lg , 7. the easiest way would be to add encrypted LVM to a new physical volume that has the capacity to hold the encrypted volumes from your current partition that you want encrypted. Hope this helps, however your mileage may vary, Chris You may want to search encrypted LVM , adding a encrypted volume/partition/drive etc. Warm regards, Justin -- - Justin W Elamith E-mail ::: - justin.w.e...@gmail.com -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
RE: Re: [nlug] Full disk encryption on Linux?
You could make a backup (using a portable format, such as tar, rather than an image backup), remove the existing filesystem, install the encrypted filesystem, and then restore the backed-up data. ---Original Email--- Subject :Re: [nlug] Full disk encryption on Linux? From :mailto:j...@gerdesas.com Date :Mon Nov 01 16:35:14 America/Chicago 2010 On Mon, Nov 01, 2010 at 04:10:21PM -0500, Chris McQuistion wrote: I have an existing CentOS installation and need to encrypt certain partitions. Encrypting after the fact would be my preference, as re-installing this system would be rather complicated. To the best of my knowledge you can not use cryptsetup to encrypt an existing file system; the create / format operations will wipe the existing data. There may have been some movement in this area I am unaware of, but I've not come across anything recently. John -- The things that will destroy America are prosperity-at-any-price, peace-at-any-price, safety-first instead of duty-first, the love of soft living, and the get-rich-quick theory of life. -- Teddy Roosevelt Sent from my Verizon Wireless BlackBerry -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
On Mon, Nov 1, 2010 at 4:51 PM, Chris McQuistion cmcquist...@watkins.edu wrote: For what it's worth, I'm not using LVM, currently. My partitions are just run-of-the-mill partitions. I can set up a second disk and move data from the old unencrypted partition to a new encrypted partition, if necessary. Chris I haven't kept up recently so there may be some auto-magic, but last I understood you will need to do something as you describe. 1. You will need some room to create an encrypted partition, whether on the same drive or another it does not matter to the process. (Though if it is a lot of disk space or lots of files, using a second drive would probably be faster.) 2. You mount the new (encrypted) partition. 3. You copy all the files from the unencrypted partition to the encrypted partition. (This can be copy, move, tar/untar, whatever you like as long as it handles any special files, permissions, attributes, ACL, etc. appropriately.) 4. You can then get rid of the unencrypted partition, resize the new partition, etc. as you like. Rereading John Eldredge's post, he pretty much reorders these. Let me add the normal unstated CYA steps to what he wrote: Make a (couple of) portable backups first (Ensure you can read the backups successfully) Wipe the old partitions Make and mount encrypted partitions Restore If you are looking for encrypting (most of) the whole system, as Critch said you need an unencrypted boot partition and init image to get things started. You used to be able to make a file that contained an encrypted file system on it. You would then mount it on the loopback device. This was handy if you didn't want to encrypt a whole partition, just some data. However, I thought I read something about the powers that be getting rid of the loopback device... I have not tried this in many years, don't remember where I read the loopback device was going/gone, etc. Paul -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
[nlug] Re: topic ideas
http://yoshinorimatsunobu.blogspot.com/2010/10/using-mysql-as-nosql-story-for.html There are experiments going on now to use a sql daemon as a nosql compatible storage engine. It turns out that it's simpler than that, you can use the api for mysql to optimize reading by primary key. I would recommend a word of caution on techniques like this because it is possible to lower your performance. There are arguments in this article that suggest it's missing sharding and other features that most nosql implementations provide. Those conclusions arise from only using myisam or innodb, if you are flexible enough to change your storage engine you can use mysql clustering. The added benefit is that you can always easily switch back to full sql parsing for more complicated less common queries. On Nov 1, 9:10 am, andrew mcelroy sophri...@gmail.com wrote: Greetings, Lately, I have been seeing the NoSQL maintain if not pick up even more steam recently. I know for certain I have chatted with fellow NLUGgers (if that's a word) about the NoSQL style databases (Mongo and couch specifically come to mind). I was wondering if that's a subject that this group would be interested in hearing about. I wouldn't mind presenting on it, but I would love to have someone else help with such a presentation. My only exposure to NoSQL is through the lense of Ruby. Andrew McElroy -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
Re: [nlug] Full disk encryption on Linux?
Remember that as there is also fuse, there is any number of ways to get an encrypted fs. I doubt the loopback is going away, nor do I expect the filter option to loopback is going away. - Original Message - You used to be able to make a file that contained an encrypted file system on it. You would then mount it on the loopback device. This was handy if you didn't want to encrypt a whole partition, just some data. However, I thought I read something about the powers that be getting rid of the loopback device... I have not tried this in many years, don't remember where I read the loopback device was going/gone, etc. Paul -- Steven Critchfield cri...@basesys.com -- You received this message because you are subscribed to the Google Groups NLUG group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
