Is Whole Disk Encryption an option on the standard Hardy desktop install?

[kevdog]

Thanks for the link -- would have been nice to see a few more benchmarks, but the performance hit wasn't as much as would have thought. Looks like the liveCD may include this by default according to the article.

Good to know.

[AnotherDave]

As long as we're wishing, let's hope for selective encrypting of directories. An encrypted /home, /swap, and /var might be a good idea, but why have an encrypted /etc, or /lib?

Also, let's put /home on its own partition in the default install.

[Patsoe]

As long as we're wishing, let's hope for selective encrypting of directories. An encrypted /home, /swap, and /var might be a good idea, but why have an encrypted /etc, or /lib?

Also, let's put /home on its own partition in the default install.

Yes, so by default the installer now creates an LVM physical volume that's encrypted, but you could turn it around: set up LVM, and encrypt some of the logical volumes only. (shameless plug: I just wrote up how I configured this stuff - though have not been as smart as to encrypt only some parts...)

[hyper_ch]

As long as we're wishing, let's hope for selective encrypting of directories. An encrypted /home, /swap, and /var might be a good idea, but why have an encrypted /etc, or /lib?

Also, let's put /home on its own partition in the default install.

well, it is much simpler to encrypt it all than to worry where you all may have sensitive data.... e.g. /etc contains users, groups and passwoords.... that might be helpful....