Skip to contentSkip to conversation

Cryptsetup FAQ montly pointer 8/13

dm-crypt Arno Wagner 3 participants 4 messages Aug 2, 2013 – Aug 4, 2013

lore
Share & tools
lore
#0 lore raw

The FAQ can be fount on the Web here:
http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions
and in the sources.

Changes:
- Added section on swap encryption as item 2.2

Arno

Signature · 7 lines
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: [email protected]
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
There are two ways of constructing a software design: One way is to make it
so simple that there are obviously no deficiencies, and the other way is to
make it so complicated that there are no obvious deficiencies. The first
method is far more difficult.  --Tony Hoare
#1 lore raw
Quoted 6 lines · Arno Wagner

The FAQ can be fount on the Web here:
http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions
and in the sources.

Changes:
- Added section on swap encryption as item 2.2

Another option for reliably identifying the swap partition is to use /dev/disk/by-id/<identifier> to identify the drive by model and serial number. For example, my own swap partition is

    /dev/disk/by-id/scsi-SATA_ST95005620AS_5YX1NEGE-part5

That should be safe unless I re-purpose that drive and forget to update /etc/crypttab.

Signature · 2 lines
Bob Nichols     "NOSPAM" is really part of my email address.
                Do NOT delete it.
#2 lore raw

That is not in there by intent as it is not universal, but distribution- and kernel-dependent.

Arno

Quoted 25 lines · Robert Nichols
Quoted 6 lines · Arno Wagner

The FAQ can be fount on the Web here:
http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions
and in the sources.

Changes:
- Added section on swap encryption as item 2.2

Another option for reliably identifying the swap partition is to use /dev/disk/by-id/<identifier> to identify the drive by model and serial number. For example, my own swap partition is

    /dev/disk/by-id/scsi-SATA_ST95005620AS_5YX1NEGE-part5

That should be safe unless I re-purpose that drive and forget to update /etc/crypttab.

Signature · 7 lines
Bob Nichols     "NOSPAM" is really part of my email address.
                Do NOT delete it.

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt
Signature · 7 lines
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: [email protected]
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
There are two ways of constructing a software design: One way is to make it
so simple that there are obviously no deficiencies, and the other way is to
make it so complicated that there are no obvious deficiencies. The first
method is far more difficult.  --Tony Hoare
#3 lore raw
In reply to Robert Nichols

Personally I'd prefer using the WWN, as it won't certainly change (seperators on a serial,model,make combination might change any time ...)

On Second thought, the seperator of the string wwn and the actual wwn could change too.

Okay, WWN is just another option.

Regards

-Sven

Quoted 26 lines · Robert Nichols
Quoted 6 lines · Arno Wagner

The FAQ can be fount on the Web here:
http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions
and in the sources.

Changes:
- Added section on swap encryption as item 2.2

Another option for reliably identifying the swap partition is to use /dev/disk/by-id/<identifier> to identify the drive by model and serial number. For example, my own swap partition is

     /dev/disk/by-id/scsi-SATA_ST95005620AS_5YX1NEGE-part5

That should be safe unless I re-purpose that drive and forget to update /etc/crypttab.

--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt