I want to encrypt Full partition instead of creating a file and encrypting it, and also want to move this disk to another server. do i need some files also (that hold keys) with my self on new server. i am using FC11.
View 2 RepliesOn my laptop (Dell Studio 1745) w/500GB HD, I have a common data partition shared by openSUSE. Fedora, FreeBSD, and windoze 7 currently. I would like to encrypt this partition (/Common) and have it accessible from all distros either with a passphrase key in /root or on a flash key. I've been researching on the web and there seem to be several possibilities using eCryptfs, Luks, cryptosetup, or any of several methods.
My question is, what have people here used and how well did it work? Also, what was required for setup (I'll probably have to explain/teach it to my wife who is technology challenged-but I still love her anyway) and my daughter who's just getting into linux. I would like to be able to keep the entire directory on the hard drive but also have the ability to copy it to external USB device for transport.
Is it possible to encrypt the Entire root file system using LUKS.I am currently using Ubuntu 10.4 LUCID.After several hours of Google ,most of the articles were focusing to "Encrypting a drive/removable media ".. My aim is to encrypt whole File system which is currently using.
My Concerns, How to Encrypt a running file system? Will it lead to data loss?
If I have a partition like /dev/hd1 that is unencrypted and want it to be encrypted, but want to keep everything currently in that partition, how can I do that?
View 2 Replies View RelatedI Have shell script like this
Code:
#!/usr/bin/expect
set password "XXXXXXXX"
[code]...
I need to temporarily store a file containing sensitive data in a public server, in a secure way. I think that encrypting the whole file would be much more secure than creating a passworded .zip encrypted file, because they could be subject of brute force attacks. Attacking a whole file of unknow format is harder, I think. I thought of something like the command:
Code:
$ programidontknow --encrypt mysensitive.file --output-file mumblerumble.file
then the program asks interactively for a password)
$ ls
mysensitive.file mumblerumble.file
So I get one file that may look like junk. I tried to search how to do it with GnuPG. But it seems that GnuPG needs much configuration I dont want to do. I simply want to type the password one time to get the file. It doesnt need to retain any configuration for what I want to do. In similar scenario, I would want to do this on a machine/account that is not mine.
What 's the most popular command to do such things in terminal in linux?
View 4 Replies View RelatedI have Kubuntu 11.04 64-bit installed (software upgrade from 10.10) and I have a separate /home partition. I want to encrypt my /home partition (and perhaps the swap partition as well) but I don't want to have to reinstall Kubuntu. (Mostly because it was a software upgrade and I don't have an 11.04 disc.) I found a tutorial for Encryptfs via one of the stickies that mentions post-install migration, but it says that using Encryptfs on a separate /home partition is more complicated than if it were part of the root partition and that the CDs don't have any software to preserve and configure existing encrypted /home partitions. (Granted this tutorial is made for 9.04, so things may have changed.)
Also, this tutorial makes it sound like if you have your /home directory encrypted that the encrypted data is stored in a folder on the root partition. Is it done the same way if the /home directory is on its own partition? Because I don't think my root partition is large enough to have all of my /home data. (I purposely kept it small because the root partition doesn't seem to get very large.)
So I was wondering about the dilemma of how to encrypt the password file on a key card to unlock your harddrive without having to enter any password. I came to the conclusion that that the scripts could do this without storing any passwords in plane text them self. Have a few extra steps to the scripts that would:
1. Read the UUID of any disks coming in.
2. Attempt to use that ID to decrypt a password file stored in the initrd.
3. Use the decrypted password file to unlock the the keycard partition.
4. THEN use the password files on the keycard to decrypt the main partition and boot the system.
However, if somebody stole your key card and didn't know what the unencrypted information was, then it's harmless for them to have it anyway. And if they did know, you wouldn't be any better off with it being encrypted because they probably can gain access to your computer anyway; leaving them to just pop the key card in and automatically decrypt the drive.
I suppose encrypting the keycard would give you extra assurance that the information would be much harder to recover if you destroyed the key card in a hurry. So would this extra security step even be worth it?
I guess the most secure thing would be to only have a password and type it in every time... unless you are concerned about the aliens/government stealing that from your brain which would probably mean they wouldn't need your password anyway.
I would like to encrypt my swap partition ...During installation, I tried to select the "encrypt partition" choice, but it needed a passphrase.After installation, I tried to encrypt my partition ... I followed this article: The problem is that my swap partition always changes its path ...When I first booted the system, it was /dev/sda10, next it became /dev/sdc10, now it is /dev/sdb10. This is probably the reason why in fstab all entries are according to UUID.However, the swap partition is not fond of UUIDs ! I tried to mkswap /dev/<current swap partition> -L Swap, I received a UUID, puted it in /etc/crypttab ... it worked for the first time ... but the second time... did not.
View 14 Replies View RelatedI've created a /tmp partition on a server that I would like to encrypt in a fashion that doesn't require a password to be entered on boot because this server is in a remote data center. Storing the password on the server so that it can automatically boot would obviously defeat the purpose of encrypting in the first place. Skipping automounting is another option but I'd really like to avoid that because there are a number of other services that would have to be suspended until the /tmp partition is online.
I found this article designed for centos (HowTos/EncryptTmpSwapHome - CentOS Wiki) which seems perfect since it generates a key randomly on boot and that key is destroyed and regenerated on each successive boot. However, the script doesn't seem to work on openSUSE - it throws errors saying . /etc/init.d/functions doesn't exist, restorecon command not found, action command not found, etc. Is there an openSUSE-ish way to achieve promptless partition encryption?
I downloaded the ISO from the Ubuntu site. I can run it from the CD without any problems however, when I install it, it freezes. I am installing on a 2nd hard drive in my computer. It gets up to the point of "Creating ext4 file system for / in partition #1 of SCSI1 (0,1,0)(sdb)... I've tried deleting the partition and creating one by myself with no prevail. I am going to school for computer networking and my counselor told me that it'd be a good idea to learn the Linux OS for my major.
View 2 Replies View Relateddf -h reports that my /var partition is full..
Filesystem Size Used Avail Use% Mounted on
/dev/sda6 2.0G 1.4G 454M 76% /
/dev/sda1 99M 16M 79M 17% /boot
/dev/sda2 9.7G 2.2G 7.1G 24% /usr
/dev/sda3 7.7G 7.4G 0 100% /var
/dev/sda7 989M 17M 922M 2% /tmp
/dev/sda8 52G 9.0G 40G 19% /home
none 493M 0 493M 0% /dev/shm
[Code]....
Does anyone know of anything that might be on the /var partition and taking up space that I can't see, or just why df -h is reporting that it's full?
I am having trouble logging into my ubuntu 11.04 desktop. When I type my username and password to login my screen goes blue, as if it is going to next show my desktop wallpaper, but then it loops back to the login screen. I had no idea why and so I went to ALT-F1 and typed in "df" and it turns out that my root partition is full. This is strange since I set aside 40GB for it and I didn't install anything or that many programs that would fill it up. Anyhow, is this fixable by booting to a live cd and using gparted to make root bigger or is there a better way to fix this?
View 6 Replies View RelatedI have a 10gb partition I use for data. The /home is there, and I mount any other data partitions (like /music stuff) onto /data. These other mounted partitions add up to something like 60gb of diskspace, but since they're just mounted on /data, I believe they only take up 4096 bytes per mount point.
Some time ago, I found that the /data parition was full. There was only 330mb of data in /home, so I was perplexed. I found a cache dir under .opera that reported itself as having 132TB (yes, that is terrabytes) of files. I thought deleting the offending directory was the answer, so I deleted that cache dir and every file or subdirectory in it, but the /data partition is still like 99% full. I am a wee bit confused.
This very full /data partition is my only jfs partition. The other mounted filesystems are either ext3 or ntfs. Is it possible that the journal of this filesystem is corrupted? Or is hidden somewhere on the /data parition, taking up a bunch of space? (I obviously don't know enough about filesystem to know whether or not this is a likely scenario.) Is it possible to zero out (or delete and re-create) the journal, if so? The only other thing I can think of is to move all the /home data off, delete the partition, then re-create it and move /home back. I will do that if need be, but I'd rather learn something from the experience, weird as it is.
Has anyone tried encrypting the boot partition to prevent the kernel from being modified. Iv tried following this but I'm running into issues when building. [URL] Im using the source from bzr checkout [URL] Last time I tried I screwed grub and it wouldnt boot.
View 9 Replies View RelatedI'm trying to create an extended partition. In GParted, I shrunk the size of the existing partition and now want to create a new EXTENDED partition in the free, unallocated space. GParted only lets me create a PRIMARY partition. What am I doing wrong here?
Here's what I've got right now:
You can actually ignore the flag for the swap as "boot." That was me just messing around trying to get it to work. I've removed that flag. Not sure how the question of boot affects all of this...maybe it factors in somehow.
I am a newbie to Linux and I am using CentOs. I am trying to create a new partion on my CentOs VM. I create a new primary partition using fdisk (I use the command fdisk /dev/hda). After I create the partition and use partprobe to write the partition to disk, I try to give the new partition a label. So, I use the command e2label /dev/hda LABEL=test
However, when I enter the command e2label /dev/hda3 , it doesn't display the label for the newly created partition. Am I doing something wrong here? Is the syntax of the e2label command wrong when creating the label for the new partition? Did I miss a step after writing the new partition to disk.
I'm trying to think of the best way to encrypt a partition on my flash drive.
I plan on storing ssh/pgp keys on it for use on different computers (including school computers, where I won't have administrative access).
TrueCrypt is going to require admin access to decrypt and mount the partition, I think, so that's out.
Are there any other methods you all would recommend?
Is it better to use:
Code: -c aes-cbc-essiv -y -s 512 Or:
Code: -c aes-xts-plain -y -s 512
I've never encrypted a disk before; I'm following the Arch wiki (I'm a newbie, basically). Should I try and encrypt my swap partition (I've got 512 MB RAM, 1 GB swap)? Ideally, I'd like to make it so it's not feasible for someone (even a very skilled someone) to access my files (and system -- I'm encrypting /), but still make it fairly fast and usable for day-to-day operations. If it matters any, I'm using JFS.
I'm following the book RHCE book (5th edition) by Michael Jang. On the exercise on pg.140, creating partitions, I've created /boot (hda1), swap (hda2) and / (hda3). So far so good.
Next, I'm supposed to make an extended partition, containing the rest of the disk. So this should be hda4, right? But when I try to create either an LVM, or RAID partition, it creates hda4 AND hda5 under hda4. Why is that? Am I doing something wrong? The book next asks me to create /var as hda5, so if hda5 is already created automatically above, how am I supposed to create /var?
Is there a way to encrypt your swap partition after installation?
View 3 Replies View RelatedI'm trying to set up a RAID1 partition on my Ubuntu 9.10 workstation.On this dual-boot system, Ubuntu is running from a separate drive (/dev/sdc - an SSD that is quite small, which is why I need more disk space). Besides that, there are two traditional 500 GB hard drives, which have Windows 7 installed (I want to keep the Windows installation intact), and about half of the space unallocated. This space is where I want to set up a single, large RAID1 partition for Linux.
(This, to my understanding, would be software RAID, whereas the Windows partitions are on hardware RAID - I hope this isn't a problem... Edit: See Peter's comment. I guess this shouldn't be a problem since I see both drives separately on Linux.)On both disks, /dev/sda and /dev/sdb, I created, using fdisk, identical new partitions of type "Linux raid autodetect" to fill up the unallocated space.
Device Boot Start End Blocks Id System
/dev/sda1 1 10 80293+ de Dell Utility
/dev/sda2 * 11 106 768000 7 HPFS/NTFS
[code]....
But so is "Device or resource busy" when trying to create the RAID array. Quite strange.
Update: Could the device mapper have something to do with this? How do /dev/mapper and dmraid relate to all this mdadm stuff anyway? Both provide software RAID, but.. differently? Sorry for my ignorance here. Under /dev/mapper/ there are some device files that, I think, somehow match the 3 Windows RAID partitions (sd{a,b}1 through sd{a,b}3). I don't know why there are four of these arrays though.
$ ls /dev/mapper/
control isw_dgjjcdcegc_ARRAY1 isw_dgjjcdcegc_ARRAY3
isw_dgjjcdcegc_ARRAY isw_dgjjcdcegc_ARRAY2
How can the number of inodes be increased on an existing EXT3 or EXT4 partition without re-creating the partition?
View 3 Replies View RelatedI have two hard drives in my desktop. One HD has a working Ubuntu system-hence the ability to post here- and the other contains Windows XP Pro. When the XP drive crashed I was able to re-install an image I had saved using Acronis. Unfortunately the dual-boot option at startup is no longer available. I can only boot to Ubuntu. Not so bad really but there are some programs on Windows that I need to use. Is there any way, using Grub perhaps, that I can reconfigure an MBR to include the second hard drive and the Windows system?
View 1 Replies View RelatedI'm sure I've done this before and never ran into trouble so it's not like I wasn't thinking, just something went wrong this time and I'm screwed. I'll post a fdisk -l to show ya what I mean.
[root@localhost ~]# fdisk -l /dev/sda
Warning: invalid flag 0x0000 of partition table 5 will be corrected by w(rite)
Disk /dev/sda: 1000.2 GB, 1000204886016 bytes
255 heads, 63 sectors/track, 121601 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Disk identifier: 0x624aa2e0
[code]...
Well I tried to install Pclinuxos 2010 to the same partitions as Mint 7 and basically just over write it (this I have done before) but this time Pclinuxos says there is a bad block and it can't copy files to / (sda7) I didn't think much of it at the time and thought I would try to install it (Pclinuxos) on a separate 100 gb usb drive and it was a sucessful install.
After booting Pclinuxos I try to access my 1TB sda hard drive and I can ony access sda1 .....when I look at /dev/sda in gparted is shows the whole disk as unallocated.I have done nothing at this point in time other than what I just said because I am very afraid of loosing all my pictures and everything else on that disk....and for those that will say always back up ....if ya think I'm not kicking myself right now your dead wrong......
error message when I ran my program that I couldn't open my local file. I have two files first one is called client, second one is called server I am using named pipes to sent a message from client to the other file called server in client I used mknod() to create the two named pipes,one for read,one for write and created new thread in client using fork() spawned a child process that executed the server file both named pipes are opened the client file got the message from the user and sent it through the named pipes to the server file when the server receives the message , it needs to verfify it is correct in the server file, a local file descriptor is created to read and send this verifing message when it is not correct but I am getting an OPEN() error when I tried to open this shared local array buff and attach it to a file descriptor where the message is kept why do I get this error in server file
int main()
{
/*both named pipes are open*/
rfd=open(IFIO1,0);
wfd=open(IFIO2,1);
[code]....
Could anyone recommend a method of creating a full disk image. I have the Acronis bootable media, would this work to backup Linux partitions? I'm thinking that Acronis doesn't know or care what is written to the disk as it works at a lower level.
View 7 Replies View Relatedi want to create a new account for vsftpd server, say ftpuser1 is userid and password is abc123...i want to give full permission to a directory /documents...where user can add,edit,delete document easily via ftp connection.rest no other ftp users i want to connect it. how best it can be achive what i need to do it.i have install ftp server in centos 5.5
View 2 Replies View RelatedI have an Acer Aspire Netbook running a dual boot with Xp and Ubuntu Netbook Version (Lucid Lynx if I am not mistaken?) Anyway I plan on selling this netbook and I need to remove the Ubuntu Partition and go back to just a full Windows Xp partition with it's recovery partition also.
View 2 Replies View Related