----- Forwarded message from Planet Debian -----

From: Planet Debian
Subject: Francois Marier -- Encrypting your home directory using LUKS on Debian/Ubuntu
To: ticker-planetdebian[bei]lists.infodrom[punkt]org
Date: Sat, 24 May 2008 10:41:47 +0200 (CEST)

http://feeding.cloud.geek.nz/2008/05/encrypting-your-home-directory-using.html

Francois Marier -- Encrypting your home directory using LUKS on
Debian/Ubuntu

Laptops are easily lost or stolen and in order to protect your
emails, web passwords, encryption keys, etc., you should really
think about encrypting (at least) your home directory.

If you happen to have »/home« on a separate partition already
(»/dev/hda5« in this example), then it's a really easy process:

- Copy your home directory to a temporary directory on a different
partition:

mkdir /homebackup

cp -a /home/* /homebackup

- Encrypt your home partition:

umount /home

cryptsetup -h sha256 -c aes-cbc-essiv:sha256 -s 256 luksFormat
/dev/hda5

cryptsetup luksOpen /dev/hda5 chome

mkfs.ext3 -m 0 /dev/mapper/chome

- Add this line to »/etc/crypttab«:

chome /dev/hda5 none luks,timeout=30

- Set the home partition to this in »/etc/fstab«:

/dev/mapper/chome /home ext3 nodev,nosuid,relatime 0 2

- Copy your home data back into the encrypted partition:

mount /home

cp -a /homebackup/* /home

rm -rf /homebackupThat's it. Now to fully secure your laptop
against theft, you should think about an encrypted backup
strategy[1] for your data...

08:28am[2] by François (noreply[bei]blogger[punkt]com)

Links:
1. http://packages.debian.org/sid/duplicity
2. http://feeding.cloud.geek.nz/2008/05/encrypting-your-home-directory-using.html

--
To UNSUBSCRIBE, send an email to ticker-planetdebian-request[bei]lists.infodrom[punkt]org
with a subject of "unsubscribe". Trouble? Contact listmaster[bei]lists.infodrom[punkt]org

----- End forwarded message -----

--
"Ja aber das Leben ist kein Wunschkonzert. Ich würde jetzt auch lieber
in der Sonne liegen oder hier auf ner prallen 17 jährigen!
Stattdessen steh ich hier mit dir Ulf!" Stromberg
-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname : nicht verfügbar
Dateityp : application/pgp-signature
Dateigröße : 189 bytes
Beschreibung: Digital signature
URL : http://www.easylinux.de/pipermail/ubuntu/attachments/20080524/954b9c5f/attachment.pgp