Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-10-04 Thread Mason Loring Bliss
On Tue, Sep 29, 2020 at 07:57:46PM +0100, g4sra via Dng wrote: > > If you include the "initramfs" option in /etc/crypttab, keys noted in > > entries marked with that will be automatically included. > > > > Not in the scripts I had, they explicitly excluded any keys for the root > filesystem

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-10-01 Thread Hendrik Boom
On Tue, Sep 29, 2020 at 08:58:42PM +0700, Андрей via Dng wrote: > Hello. > > > I've seen on the DeVuan web wite an article on complete system HDD > encryption using LLVM. I have tried that one and found that it is > impossible to change partiotion sizes once it was autopartiotioned, > using LLVM

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-10-01 Thread fsmithred via Dng
On 9/29/20 9:58 AM, Андрей via Dng wrote: > Question is, Is it possible to to achieve same goal without LLVM -- > i.e. to partition system HDD with fdisk, and then still have full > encryption? > Another way to do it is with the live-isos (using refractainstaller). Select encryption for the root

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-10-01 Thread Michael Neuffer
On 10/1/20 4:42 AM, Steve Litt wrote: On Tue, 29 Sep 2020 20:58:42 +0700 Андрей via Dng wrote: I've seen on the DeVuan web wite an article on complete system HDD encryption using LLVM. I have tried that one and found that it is impossible to change partiotion sizes once it was

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-10-01 Thread Dimitris via Dng
On 10/1/20 2:30 PM, Olaf Meeuwissen via Dng wrote: - /etc? 'cause you might end up saving clear text passwords there ... Oh! I found one below/etc/wpa_supplicant/. There might be others. could also be clear-text : smtp account password(s), network-manager saves

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-10-01 Thread Olaf Meeuwissen via Dng
Hi Steve, Steve Litt writes: > On Tue, 29 Sep 2020 20:58:42 +0700 > Андрей via Dng wrote: > >> Hello. >> >> >> I've seen on the DeVuan web wite an article on complete system HDD >> encryption using LLVM. I have tried that one and found that it is >> impossible to change partiotion sizes once it

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-09-30 Thread Steve Litt
On Tue, 29 Sep 2020 20:58:42 +0700 Андрей via Dng wrote: > Hello. > > > I've seen on the DeVuan web wite an article on complete system HDD > encryption using LLVM. I have tried that one and found that it is > impossible to change partiotion sizes once it was autopartiotioned, > using LLVM full

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-09-29 Thread g4sra via Dng
On 29/09/2020 19:05, Mason Loring Bliss wrote: > On Tue, Sep 29, 2020 at 04:02:35PM +0100, g4sra via Dng wrote: > >> Copy /boot over onto / >> * rebuild the initramfs in the NEW /boot on / * >> ^^^ > ^^^ you will need to hack the initramfs-tools scripts or they will >> exclude the Luks key ^^^ >

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-09-29 Thread Mason Loring Bliss
On Tue, Sep 29, 2020 at 04:02:35PM +0100, g4sra via Dng wrote: > Copy /boot over onto / > * rebuild the initramfs in the NEW /boot on / * > ^^^ > ^^^ you will need to hack the initramfs-tools scripts or they will > exclude the Luks key ^^^ If you include the "initramfs" option in /etc/crypttab,

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-09-29 Thread g4sra via Dng
On 29/09/2020 15:27, Mason Loring Bliss wrote: > On Tue, Sep 29, 2020 at 08:58:42PM +0700, Андрей via Dng wrote: > >> Question is, Is it possible to to achieve same goal without LLVM -- >> i.e. to partition system HDD with fdisk, and then still have full >> encryption? > > Yes, or at least,

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-09-29 Thread g4sra via Dng
On 29/09/2020 14:58, Андрей via Dng wrote: > Question is, Is it possible to to achieve same goal without LLVM -- > i.e. to partition system HDD with fdisk, and then still have full > encryption? Luks encrypt the whole HDD or a large partition first then overlay LVM to get resizeable volumes and

Re: [DNG] Complete system HDD encryption w/o LLVM.

2020-09-29 Thread Mason Loring Bliss
On Tue, Sep 29, 2020 at 08:58:42PM +0700, Андрей via Dng wrote: > Question is, Is it possible to to achieve same goal without LLVM -- > i.e. to partition system HDD with fdisk, and then still have full > encryption? Yes, or at least, mostly. There needs to be unencrypted data that contains the

[DNG] Complete system HDD encryption w/o LLVM.

2020-09-29 Thread Андрей via Dng
Hello. I've seen on the DeVuan web wite an article on complete system HDD encryption using LLVM. I have tried that one and found that it is impossible to change partiotion sizes once it was autopartiotioned, using LLVM full system HDD encryption. Question is, Is it possible to to achieve same