LeRoy on 15 Jul 2010 02:31:40 -0700

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Laptop recovery--useful data to collect?--A tangent

Hash: SHA1

On 07/14/2010 08:27 PM, Art Clemons wrote:
> The more this discussion goes on, the more I realize that there are 
> talks at the meetings to be made out of this discussion.  For
> example what are the downsides to encrypting an entire disk?  What
> happens if for example shutdown is improperly done and a partition
> needs the service of FSCK or some similar technique?  I know there
> are answers out there, but obviously most of the folks on this list
> don't readily know them.
> My last experiment with truecrypting an entire partition ended in 
> disaster, but fortunately I had all relevant data backed up so it
> was just a reinstall.  I couldn't escape the impression though that
> if I had known more, the reinstall could have been avoided.  Thus if
> any of you like JP actually has the experience, the suggestion is
> obvious.

On laptops I encrypt /home /tmp and swap.  /var/tmp is a symlink to /tmp
and If the laptop has mysql or postgresql loaded /var/lib/postgresql is
a symlink to /home/postgresql.  Of course if you use mysql change the
symlink accordingly.

This way you have access to the operating system and have fsck at your
disposal.  Of course with my setup booting the laptop requires me to
enter 3 passphrases in order to mount the encrypted partitions.

I do not know if it is possible to resize an encrypted partiton.  Thus
you need to know in advance how much space you need for the partitions.

- -- 
 Rev. LeRoy D. Cressy  mailto:leroy@lrcressy.com   /\_/\
                       http://lrcressy.com        ( o.o )
                       Phone:  215-535-4037        > ^ <
		       Cell:   267-307-3527

gpg fingerprint:  62DE 6CAB CEE1 B1B3 359A  81D8 3FEF E6DA 8501 AFEA

For info on enigmail:    http://lrcressy.com/linux/mozilla.pdf
For info on gpg:         http://www.gnupg.org/

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug