The in build cipher algorithms that are in the kernel are not critically secured, the best, I think, supports 384 bit encryption.
So I was looking forward towards stuff like DSA or very preferably OTP cipher with like... 8192 bit encryption using DM, I know it sounds insane, but so is the data. I want it to be uncrackable for the fastest supercomputer combined till 2070.
I have a Insprion 14R (N4010) and when I hibernate it will usually restore without a problem, but maybe 15% of the time it will reboot while loading. I would like to figure why, since I'd rather not lose anything... My swap space is 5.9GB, I have 4GB RAM (video uses 1gb, so I have 3gb usable)
lspci says
00:00.0 Host bridge: Intel Corporation Core Processor DRAM Controller (rev 18)
00:02.0 VGA compatible controller: Intel Corporation Core Processor Integrated Graphics Controller (rev 18)
00:16.0 Communication controller: Intel Corporation 5 Series/3400 Series Chipset HECI Controller (rev 06)
[code]....
I do have the hibernate package installed...
I am *finally* getting around to rebuilding my file-sharing computer. I'll be sharing files with both Linux and Windoze machines. It's a home network, so there's nothing fancy needed. I know I have to tweak my smb.conf file until I'm satisfied with the features and security. I'm using SWAT and I'm starting with a bare-bones conf file. It's not secure but I can see the server and selected files/directories from my other Linux box.
My really dumb question is, do I have to reboot both the server and the client machines every time I change the SAMBA configuration? I thought I just had to stop and restart the SAMBA service in the SWAT software - but then the server disappears from my client. It looks like I need to reboot both machines for the client to see the server.
Debian 6.0 Squeeze (stable) AMD64.
At first the problem was that the old volume group (containing all logical volumes for both physical volumes) had the same name as the new volume group. I did a reinstall where I changed the name and ran vgreduce --removemissing debian which seems to have removed all logical volumes from the old volume group.
When I try to unlock the drive in Gnomes Disk Utility I get "Incorrect Passphrase. Try again." but I *know* it's the right password, and I don't get any error when changing the password so that seems to be possible.
I found the oldest archive in /etc/lvm/archive/ and manually edited it to remove any stuff about the old LVs and PVs. Then I did vgcfgrestore --file VG_backup.vg groupname. With the help of blkid I edited /etc/fstab and /etc/crypttab to mount the disk at startup.
I would like to use one time passwords with ssh.I know there is the RC Devs openotp library but I have found very little information on the web about how to use this with ssh or even if that is possible.
View 1 Replies View RelatedI've created live squeeze usb-hdd with xfce desktop and if I start it, I have UTC time. Howto set fix to UTC+02:00, before image creation?
View 2 Replies View RelatedI'm trying to manually boot (from the GRUB console) into a system set up as follows: crypt partition -> LVM -> root LV, and I'm having some trouble figuring out how to do this from the GRUB console.
I have successfully manually booted a system which is set up as just LVM -> VG -> root LV. All I have to do is load the LVM module. In GRUB, that partition shows up as (hd0,gpt5). Once I load the GRUB LVM module, I can see the logical volume within the LVM as well. (My volume group name is "caesar", and the single logical volume is named "root".)
Code: Select allgrub> ls
... (hd0,gpt5) ...
grub> insmod lvm
grub> ls
... (lvm/caesar-root) ...
It's fairly simple to manually boot:
Code: Select allgrub> set root=(lvm/caesar-root)
grub> linux /vmlinuz root=/dev/mapper/caesar-root
grub> initrd /initrd.img
grub> boot
Where I am having difficulty is in trying to insert crypt before LVM. I can set up such a scheme, and put a minimal installation on it, without issues. It's booting into it upon reboot that I can't figure out. Once I load the GRUB crypto, cryptodisk and luks modules, I can mount the crypto partition:
Code: Select allgrub> ls
... (hd0,gpt5) ...
grub> insmod crypto
grub> insmod cryptodisk
grub> insmod luks
grub> cryptomount (hd0,gpt5)
Attempting to decrypt master key...
Enter passphrase for hd0,gpt5 (<long hex string here>): <type my password>
Slot 0 opened
grub> ls
... (crypto0) ...
At this point, GRUB sees the crypto partition as (crypto0). But the GRUB LVM module doesn't see "inside" of the crypto partition, so I don't see the root logical volume within the LVM listed; all I see is (crypto0).
Code: Select allgrub> insmod lvm
grub> ls
... (crypt0) ...
Setting it as root doesn't work:
Code: Select allgrub> set root=(crypto0)
grub> ls /
error: disk `crypto0' not found.
So, How do I get GRUB to "see" LVM inside the crypto partition?
I have two partitions in LVM. They are added in /etc/fstab to mount automatically. But, they are not working. The process to mount partitions seems to be happening before the service /etc/init.d/lvm2 is started. I can get it mounted using "mount -a" command, but not during the boot time. What should I do get it automatically mounted on every boot?
View 5 Replies View RelatedI'm running Debian Etch AMD64, and currently trying to clean up my system in preparation for an upgrade to Lenny. One problem I have is that resolvconf (which is installed) does not start at boot time, but if I start it manually then bring the NIC down and back up, it works OK, with no error/warning messages.
View 9 Replies View RelatedA windows server named SRV is sharing folders for each users in /share/From a Debian computer on network logged with the user session "foo" I can mount the remote directory /share/foo with:smbmount //SRV/share/$LOGNAME /remote_directorythen the prompt ask me for password and when I have gave it the remote directory is mounted correctly.Now I would like to make this at boot time.If I put the same command in the .bashrc, when I boot, the remote directory is not mounted when the session is opened but then if I open a console, it ask me for password and the directory is mounted.This way is not convenient and it would be better if the directory is mounted when the user open his session and using the same password.The point is that every user should have a his own remote directory mounted when the session is opened.
View 2 Replies View RelatedOn Debian Etch I used to understand how to change boot kernel parameters with Grub. You could just edit menu.lst.
With the newer Grub in Squeeze I am without a clue! I want to set up a ramdisk, say 128 Megs in size, and add that to my boot parameters so that it is created every time the machine starts. Do I set something in /etc/default/grub ?
I'm trying to stop all boot time messages from appearing -- basically I'd like to have a simple blank screen from grub to xdm.
I tried everything -- used the "quiet" option in grub's config, added dmesg -n 1 to rc.local, changed console=ttySx, set kernel.printk in sysctl.conf to 4 1 1 7, and even eradicated rsyslogd altogether... to no avail. I still see all sorts of messages on my screen.
I just bought an lenovo thinkpad 440 few days ago. I did all that was shared at [URL] ....
I get the following on the CLI :-
Code: Select all[ 1527.961367] [drm:intel_set_fpu_fifo_underrun_reporting [i915]] *ERROR* uncleared fifo underrun on pipe A
[ 1527.963448] [drm:ironlake_irq_handler [i915]] *ERROR* CPU pipe A FIFO underrun
so as my title implies I like to login to my headless debian box after it reboots yet havent found any info on that. Can someone please tell me of script which I suppose would be used to make vino start as a process right after boot
View 2 Replies View RelatedSince recently statd at the boot time takes, more then 30s or even more.
It is laptop configuration, no NFS server(?) lenny with few installs from backports (open office and .30 kernel - for Intel 5300) vmwware (7), as well firestarter firewall
Can I disable it or change the boot order (via sysv-rc-conf ), so I can speed up my boot time?
Running Debian stable. I added the following command to rc.local and made it executable:mount -t cifs -o username=ted,password=computer,uid=mooreted,gid=users "//192.168.1.121/Storage Volume" /mnt/vortexAfter rebooting dmesg throws the following error:
[ 21.400697] CIFS VFS: Error connecting to IPv4 socket. Aborting operation
[ 21.400708] CIFS VFS: cifs_mount failed w/return code = -101
However, if I run the command as root after the system boots it works fine.Been using this method on other distros for over a year. No idea what the problem is.
I am running Debian-Squeeze with apache2. However, apache2 doesn't start at boot time, even though there is of course the required script in init.d. I can start it later on using "/etc/init.d/apache2 start". I have checked the configuration with "apachectl configtest" - giving the answer "Syntax ok". How do I get it to start automatically at boot time?
View 1 Replies View RelatedI seem to have run into the bug where my system was suspended when the DST change occurred (Not off so it didn't do it on reboot, not on so it couldn't do it then). I can't seem to find any way to do it manually. Is there any?
View 9 Replies View RelatedI like to login to my headless debian box after it reboots yet havent found any info on that. Can someone please tell me of script which I suppose would be used to make vino start as a process right after boot.
View 3 Replies View RelatedHow can I change the automatic fsck execution at boot time to be above 30 boots? I reboot the system sometimes 3 to 4 times a day. Intel 3 GHz, tower, i386 lenny vmlinuz-2.6.31-686
View 2 Replies View RelatedI was playing with my debian server when something went totally wrong while i was editing something on my network interface,i removed those crap that i wrote and left the network interface configuration as it was
Like for example after re-editing my network interface,it was like :
As i did a network restart, i get this error saying :
There is already a pid file /var/run/dhclient.eth0.pid with pid 2802 killed old client process, removed PID file.
What is this error and how can i fix it,because every time im re booting my server i lost my network config.
Since the upgrade from Lenny to Squeeze on my Notebook Toshiba Satellite Pro U200 with Intel Pro/Wireless 3945 ABG I have wireless connection problems.The connection breaks time to time and sometimes cannot connect automaticaly after restart. BTW I didn't change anything on the wireless or network configurations on the notebook and on the wiereless router.
View 8 Replies View RelatedI have a strange problem on my new installation of Debian "Stretch".
After "loading initial ramdisk" the pc freeze, but if I reboot it, then it doesn't freeze and so I could work.
So for work each time I have to boot and reboot the pc; the second time the pc works.
I can't believe that I did not write down the password to my encrypted volume. Had not rebooted in a long time so I had not typed it and now that I rebooted I don't remember what is was.
Is there any way to automate the trial of different passwords? I remember the basic structure of what the password was so if somehow I could automate trying passwords from a list I may have a good change to recover my volume.
If/when I do remember the password. Is there a way to change the password on an encrypted volume? I need to make it something I will remember for sure... or write it down somewhere safe..
I have a compressed backup that I want to crypt and upload to a remote server through ssh once in a while. The problem is with the size, more than 4 GB. If the connection drops how does scp know to resume? This should be an automated process.
View 8 Replies View RelatedSince i'm on-the-road a lot encryption is crucial, with windows i've always used TrueCrypt and DiskCryptor, this is very easy to setup and allows me to create usb/cd devices that i can boot off and contain a keyfile, on boot it also requires a passphrase. Currently all i need to do is boot from harddisk and enter my passphrase. I would like to be able to boot from external device (in this case USB) that contains the bootloader and an integrated keyfile, also it should requist the passphrase. I found a guide on how to achieve two-factor authentication with dm-crypt on feisty but it's quite an old guide and is realy realy complicated for a newbie
View 1 Replies View RelatedI'm simply interested in a more basic discussion of why one would choose one of these methods over the other. What do they offer that the other does not? I'll start with what I know:
- dm-crypt/LUKS
--- included in a lot of install images already; in other words, perhaps easier to implement on a fresh install
- TrueCrypt
--- multiple encryption algorithms possible
[code]....
For me... I have no need for Windows compatibility, though I do use OS X on a dual booting MacBook. I believe TrueCrypt woks with OS X, so that could be a bonus, though I can simply encrypt my home folder on OS X with it's own FireVault and be fine.My setup (after wiping and starting over) will probably be like so:
- /boot on it's own primary partition
- / on it's own primary partition with logical partitions within
--- /usr, /var, /etc, /opt, and the like on a logical partition
--- /home on a logical partition
/home will surely be encrypted and I'm leaning toward encrypting the rest as well, though perhaps it's not necessary. I'm open to input there as well -- is there anything the leaks from normal application use into /var or /tmp that would make one lean toward just encrypting the whole thing?
I opened up TrueCrypt just to look at it and since I can't encrypt a whole partition without losing data... I pretty much have to encrypt from what? A live CD? This could be a drawback -- I think since TrueCrypt isn't coming on install disks, I'd have to go with an unencrypted (or dm-crypt/LUKS) root partition and then use TrueCrypt to make a container (or partition) for /home only. I can't think of another way to do this since I can't encrypt the whole disk as one entity with my dual booting situation...
I just bought a new laptop which will be running SSD (Corsair 120GB) as the boot drive and would like to migrate my OS to the new system. One of my requirements is full-disk encryption. I work with proprietary client data and need to encrypt the new drive, its swap partition, everything except for /boot. I've read instructions for doing this from the alternate install CD, but my OS is disturbingly customized (started out as 10.04) and it would take months to rebuild everything. I keep remastersys (-dist) ISOs to ensure I don't have to go through that process, but the ubiquity installer does not appear to have the option of doing disk-level crypt during the installation process. I can boot the ISO into CLI, but don't know how to run the alternate installer from there.
View 1 Replies View RelatedI have a perfectly OK 2.5 inch disk drive from a dead laptop (graphics card failed).
The hard drive is fine. I know the passphrase.
I had installed Ubuntu 10.04 with full fisk encryption using dm-crypt/luks using the alternate install cd.
I'm not exactly sure of the configuration I selected. Just that its full disk encryption with a pre-boot passphrase prompt.
Now my issue is, I have put the drive into a usb drive docking station, and I simply want to mount the partition on my new laptop, so I can copy the files over.
I've tried googling for various things like "mount dm-crypt drive linux" and "how to mount a luks encrypted partition linux", but I get no results.
I'm not a mathematician or cryptographer, only an end user of the technology trying to determine the "best" or safest future proof option to go with for long term archival while also maintaining reasonable performance with dual opteron ~2GHz or similar setup. I've noticed aes-cbc-essiv seems to be the default choice in various installers for reasons of backwards compatibility while others are moving towards XTS since the standardization.
View 1 Replies View Related