Encrypt your home folder after installation
phma at leaf.dragonflybsd.org
Wed Oct 4 20:26:19 PDT 2017
On Thursday, October 5, 2017 12:03:02 AM EDT Olle Harstedt wrote:
> Hi dfly!
> I've installed dfly and wish to encrypt my home folder. I discussed it
> breifly on #dragonflybsd, and it seems like the best option is to
> encrypt the whole disk *during* installation, not after. Are there any
> other options?
Are you encrypting just /home, or the whole disk? It's been a long time since
I've installed any OS. On zyxomma (my DragonFly box) I have a plaintext slice,
which is /, /home, and most other filesystems, and a ciphertext slice, which
is /crypt and /usr/obj, which I put as a PFS on /crypt because I was once
compiling lots of stuff at once and /crypt is bigger. On my Linux laptop and
mailserver, I do have /home encrypted, but /usr is plaintext.
No matter how you set up disk encryption, /boot must be plaintext, because
that's where the encryption code is stored.
ve ka'a ro klaji la .romas. se jmaji
More information about the Users