On the road again: Encryption

[NoOp]

On 02/23/2012 04:20 PM, NoOp wrote:
> On 02/22/2012 12:16 PM, Kaj Haulrich wrote:
...
>> Well, I run my /home partition encrypted with the built-in encryption 
>> tool. It runs absolutely fine, and from what I have read, it should be 
>> impossible to crack without a supercomputer running for years. It does 
>> require a fresh install and formatting - including the swap partition.
> 
> Actually that is incorrect. You can easily encrypt your home folder and
> swap without doing a fresh install. Simply use ecryptfs-migrate-home and
> ecryptfs-setup-swap (the later will require also installing cryptsetup).
> I've done this on virtual machines as well as several of my work
> systems. See:
> 
> <http://blog.dustinkirkland.com/2011/02/long-overdue-introduction-ecryptfs.html>
> 
> 
> Note: this is relatively simple, but I *highly* recommend trying it a
> few times on a virtual machine or a test machine before using it on your
> actual working /home. And of course, backup beforehand. Also, Dustin
> fails to mention that you really need to run ecryptfs-migrate-home while
> logged in as another user with adminstrative rights. Easyest is to creat
> a 'test' user, give it admin rights, log out of your user & log in as
> 'test'. Then run:
> 
> Get the packages:
> $ sudo apt-get install ecryptfs cryptsetup
...
Sorry. Should be:
$ sudo apt-get install ecryptfs-utils cryptsetup