Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #224045
| From | Michael Stone <mstone@debian.org> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Advice on encrypted filesystem |
| Date | 2020-06-26 17:50 +0200 |
| Message-ID | <AlYM2-7Eu-11@gated-at.bofh.it> (permalink) |
| References | <AloSd-2vx-1@gated-at.bofh.it> <AlpOh-3at-1@gated-at.bofh.it> <Alyyd-8qd-5@gated-at.bofh.it> <AlWAx-6p8-5@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Fri, Jun 26, 2020 at 08:25:49AM -0500, David Wright wrote: >If encrypting an entire disk, scramble the disk first, then partition. >If only encrypting a partition, partition the disk first. >Alignments should be at least 2M (4096 x 512B sectors). >Scramble any sensitive pre-existing contents: > ># dd bs=1M if=/dev/urandom of=/dev/sdz[9] I personally wouldn't do this. It's slow and doesn't gain much. I definitely wouldn't do it on an SSD. ># cryptsetup --align-payload 2048 luksFormat /dev/sdz9 I also would not add this align-payload option. (If you don't, cryptsetup will query the kernel for optimal parameters.)
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 03:30 +0200
Re: Advice on encrypted filesystem Roberto C. Sánchez <roberto@debian.org> - 2020-06-25 03:40 +0200
Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-25 04:20 +0200
Re: Advice on encrypted filesystem john doe <johndoe65534@mail.com> - 2020-06-25 09:50 +0200
Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 13:40 +0200
Re: Advice on encrypted filesystem David <bouncingcats@gmail.com> - 2020-06-25 15:30 +0200
Re: Advice on encrypted filesystem Nicolas George <george@nsup.org> - 2020-06-25 15:40 +0200
Sound in Jitsi/BBB [was: dvice on encrypted filesystem] <tomas@tuxteam.de> - 2020-06-25 16:00 +0200
Re: Sound in Jitsi/BBB [was: dvice on encrypted filesystem] Nicolas George <george@nsup.org> - 2020-06-25 16:00 +0200
Re: Sound in Jitsi/BBB [was: dvice on encrypted filesystem] <tomas@tuxteam.de> - 2020-06-25 16:10 +0200
Zoom client for Linux (was: Re: Advice on encrypted filesystem) rhkramer@gmail.com - 2020-06-25 16:20 +0200
Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 16:30 +0200
Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-25 04:30 +0200
Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 13:50 +0200
Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-26 15:30 +0200
Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-26 16:40 +0200
Re: Advice on encrypted filesystem Michael Stone <mstone@debian.org> - 2020-06-26 17:50 +0200
Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-26 21:10 +0200
Re: Advice on encrypted filesystem Michael Stone <mstone@debian.org> - 2020-06-26 21:50 +0200
Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-27 03:30 +0200
Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 06:10 +0200
Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 09:10 +0200
Re: Advice on encrypted filesystem Admin4 <admin4@dwaves.de> - 2020-06-27 10:10 +0200
Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 21:50 +0200
Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 22:20 +0200
Re: Advice on encrypted filesystem Andrei POPESCU <andreimpopescu@gmail.com> - 2020-06-27 10:50 +0200
Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 23:30 +0200
csiph-web