markuswells
January 19th, 2013, 12:27 AM
SO I have done a LOT of research and am still not entirely sure how this is going to work 'in real life'. So I would like to get some input before I start building this out.
I would like to setup a FDE (Full Disk Encryption) Ubuntu system, but really that means I would like to have (I think):
1) a raw (not encrypted) /boot (512mb)
2) an encrypted /swap (2-3 x ram)
3) a raw /home (ubuntu will encrypt /home/users)
4) an encrypted /
I do not even understand how this part will 'act', but its really only part of the story.
q1) Will I have to enter a password for EVERY one of the above thats encrypted?
One for swap, another one for / and then the user signs in and that decrypts the /home/user
q2) can I put all of that into a LVM group?
PART 2 of this is:
I would like to be able to take advantage of LVM and make a snapshot (or copy or mirror or...) of the OS, then (tweek something), reboot and be able to choose which of the NOW 2 OS's to load.
Then update 1 of them (making it different from the other). Decide if I like the changes and either delete 1 or NOT
The important part of this is that I will be doing testing and want to be able to choose which to 'start' at boot.
Considerations:
I 'might' decide to have a different disto on this also, maybe MINT or Arch.
So I need to give consideration to how many LVM groups I create or whatever the structure needs to be to handle the additional OS's.
Thanks for the advice.
Markus
I would like to setup a FDE (Full Disk Encryption) Ubuntu system, but really that means I would like to have (I think):
1) a raw (not encrypted) /boot (512mb)
2) an encrypted /swap (2-3 x ram)
3) a raw /home (ubuntu will encrypt /home/users)
4) an encrypted /
I do not even understand how this part will 'act', but its really only part of the story.
q1) Will I have to enter a password for EVERY one of the above thats encrypted?
One for swap, another one for / and then the user signs in and that decrypts the /home/user
q2) can I put all of that into a LVM group?
PART 2 of this is:
I would like to be able to take advantage of LVM and make a snapshot (or copy or mirror or...) of the OS, then (tweek something), reboot and be able to choose which of the NOW 2 OS's to load.
Then update 1 of them (making it different from the other). Decide if I like the changes and either delete 1 or NOT
The important part of this is that I will be doing testing and want to be able to choose which to 'start' at boot.
Considerations:
I 'might' decide to have a different disto on this also, maybe MINT or Arch.
So I need to give consideration to how many LVM groups I create or whatever the structure needs to be to handle the additional OS's.
Thanks for the advice.
Markus