Results 1 to 4 of 4

Thread: Disk encryption with separate home drive

  1. #1
    Join Date
    May 2009
    Location
    Wales UK
    Beans
    333
    Distro
    Ubuntu 12.04 Precise Pangolin

    Disk encryption with separate home drive

    I'm now looking to install Ubuntu 12.04 onto my machine using the alternate iso. To speed up the performance of my machine in thinking of buying an SSD for installing the OS, and use my current HDD for the home directory.

    Taking as red that I will back up my data and be left with two clean drives.

    Questions:
    Will enabling disk encryption encrypt both the SSD and the HDD?
    Will I need to encrypt it separately using home folder encryption?

  2. #2
    Join Date
    Sep 2007
    Beans
    37

    Re: Disk encryption with separate home drive

    Enabling encryption ecrypts the whole target drive (except /boot) so the SSD will be encrypted, but not the HDD.
    As to the second question, since /home will by default be on your SSD it will be encrypted, but if you manually select to have it on your HDD, you'd need to use home folder encryption - but I've never done such an install so YMMV.

  3. #3
    Join Date
    Jan 2006
    Location
    Southampton, UK
    Beans
    177
    Distro
    Ubuntu

    Re: Disk encryption with separate home drive

    The system I am using should work for you:

    Using the alternative install CD, I choose manual partitioning.

    Boot partition: unencrypted, about 200MB
    System partition: Encrypted, then LVM containing the root file system and swap
    Home partition: Encrypted, then formatted as Ext4 and mounted as home.

    This will initially ask you for two passphrases - one to unlock the system disk and the second to unlock the home partition.
    I ge around this by creating a keyfile, then adding this to the home partition with cryptsetup. change /etc/crypttab to use the key file, and it works perfectly.

    I don't bother with home folder encryption as offered by the installer - this is separate and different to encrypting the disk or partition.

  4. #4
    Join Date
    May 2009
    Location
    Wales UK
    Beans
    333
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Disk encryption with separate home drive

    Quote Originally Posted by irw View Post
    The system I am using should work for you:

    Using the alternative install CD, I choose manual partitioning.

    Boot partition: unencrypted, about 200MB
    System partition: Encrypted, then LVM containing the root file system and swap
    Home partition: Encrypted, then formatted as Ext4 and mounted as home.

    This will initially ask you for two passphrases - one to unlock the system disk and the second to unlock the home partition.
    I ge around this by creating a keyfile, then adding this to the home partition with cryptsetup. change /etc/crypttab to use the key file, and it works perfectly.

    I don't bother with home folder encryption as offered by the installer - this is separate and different to encrypting the disk or partition.
    Thank you both for your answers to my questions.

    The quoted way of setting up the system sounds interesting, I'll have a crack at doing this.

    Thanks

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •