Re: [arch-general] Full system encryption with support for hibernation

2009-10-27 Thread Thomas Bächler
vlad schrieb: Thanks, helpful hints. But does this also work with suspend-to-ram? I mean, when suspending to ram everything remains unencrypted? Do I see this right? Suspend to RAM always works - however, there are potential attacks where people freeze your laptop, take out the (frozen) RAM

Re: [arch-general] Full system encryption with support for hibernation

2009-10-26 Thread vlad
On Sun, Oct 25, 2009 at 05:01:11PM +0100, Thomas Bächler wrote: It is possible. Consider the following setup: You have two partitions, one small (50MB) /boot /dev/sda1, the rest /dev/sda2. Now you create a LUKS-Volume in /dev/sda2, let's call this volume enc. Inside /dev/mapper/enc create

[arch-general] Full system encryption with support for hibernation

2009-10-25 Thread Karol Babioch
Hi, I've recently set up full encryption of my system (including swap), but therefore lost the possibility to suspend my device to disk (hibernate). The only way mentioned in the wiki is highly not recommended as you would have to place your key on the unencrypted boot partition, which basically

[arch-general] Full system encryption with support for hibernation

2009-10-25 Thread Karol Babioch
Hi, I've recently set up full encryption of my system (including swap), but therefore lost the possibility to suspend my device to disk (hibernate). The only way mentioned in the wiki is highly not recommended as you would have to place your key on the unencrypted boot partition, which basically

Re: [arch-general] Full system encryption with support for hibernation

2009-10-25 Thread Daenyth Blank
On Sun, Oct 25, 2009 at 11:17, Karol Babioch ka...@babioch.de wrote: Hi, The only way mentioned in the wiki is highly not recommended as you would have to place your key on the unencrypted boot partition, which basically conflicts the idea of full encryption (see

Re: [arch-general] Full system encryption with support for hibernation

2009-10-25 Thread Karol Babioch
Hi, On So, 2009-10-25 at 11:27 -0400, Daenyth Blank wrote: Could you put the key on a usb drive so that the drive is required to unlock the partitions? thank you very much for your reply. However I don't like the idea to store my key(s) on an usb drive. First of all if my laptop really gets

Re: [arch-general] Full system encryption with support for hibernation

2009-10-25 Thread Karol Babioch
Hi, thanks very much, I'm about to save my stuff, and trying to set this up, although it could take a while ;). -- Best regards, Karol Babioch ka...@babioch.de signature.asc Description: This is a digitally signed message part

Re: [arch-general] Full system encryption with support for hibernation

2009-10-25 Thread Karol Babioch
Hi, ok, I've set everything up as described by you, and it actually works just great. The only problem I ran into was that I've backed up my files using partclone, which is just great, but as I've changed my partition scheme a little bit, it was quite hard to restore everything, as partclone