I followed this tutorial to encrypt my entire installation: SDB:Encrypted root file system - openSUSE
It worked splendidly and whoever wrote it should get a lifetime supply of beer. After I got the install encrypted I made a RAID 1 array of 2 1GB disks and encrypted that as well. They are used for a data repository.
[Code]...
but I wantto set up a new system with openSUSE 11.3 The system should be fully encrypted. I want to use the best possible encryption.1 I am not sure, AES 256 xts-plain is the most secure single algorithm, isn't it?2 Is it possible to use a cipher? 3 Which algorithm does the yast-installer use when I encrypt the whole system with a logical volume group?I have read this two articles:a) Encrypted Root File System - openSUSEb) openSUSE Lizards encrypted root file system on LVMBut I have to say that these routines are a little bit complicated in my eyes.Isnt there a easier way to encrypt the whole OS?I know there is a 64bit live cd available. 4 So the first description (a) is obsolete?5 How can I set up a (fully encrypted) system without using LVM?The hard disk layout should be done in this way:
/boot sda1
/enhanced partition sda2
/swap sda5
[code]....
I just upgraded from F14 to F15 and have a problem with entering the password for the encrypted FS: when booting with the latest entry in the bootloader:
Quote:
kernel /vmlinuz-2.6.38.6-26.rc1.fc15.i686.PAE ro root=/dev/mapper/vg_anonymous-lv_root rd_LUKS_UUID=luks-3ef72221-1165-46a6-ab69-3932e22e9d4f rd_LVM_LV=vg_anonymous/lv_root rd_LVM_LV=vg_anonymous/lv_swap rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=de
initrd /initramfs-2.6.38.6-26.rc1.fc15.i686.PAE.img
[Code]....
I have installed debian 6 on two of my laptops. During installation I chose to encrypt my partitions (swap, root and home). Now I find it annoying that during boot up I'm asked for password, for each of these partions seperately. I have given same password for all three of them. How can I make the system ask for the password only once. I know it can be done because on fedora it was like that before.
View 5 Replies View RelatedI just installed SUSE 11.2 as dual-boot with WinXP on an older system that has a 160GB PATA drive and a 500GB SATA RAID drive. I left about 80GB on the PATA drive unpartitioned to accommodate SUSE. During the initial installation attempt, SUSE was determined to install on the RAID drive instead of the PATA drive, so I disabled the SATA drivers in the BIOS to force the installation on the PATA drive. This was successful, but now there is no access to the RAID drive from SUSE because there is no driver and it is not mounted. I reactivated the SATA drivers in the BIOS and the RAID drive reappeared in WinXP with everything intact. The SATA drives now appear in SUSE under Hardware Information as "/dev/sdb" and "/dev/sdc" and the listed driver is "sata_sil".
So how do I get the RAID drivers installed in SUSE and then mount the drive so it can be browsed/modified from Dolphin? I would also like to be able to browse/change this drive from other computers on my home network through samba, just like with WinXP.
I've been trying on new installation for opensuse 11.3 on Intel P55 raid5 configured system, one non-raid disk for boot device, a raid5 array as data device. However, installation always gets hung on Searching Linux partition step and I was able to see the vgscan process was the last command to run. Is it a known bug? Does anyone have the same issue as mine?
View 5 Replies View RelatedI have the following commande /sbin/fuser -f -u /u/DT01/F010107 1>/tmp/null 2>/tmp/seausr.T0069 when executing as root 'su' this give me all user using the file. but when tried with 'sudo' i am asked with 'user password'. Is ther anyway to simply get the result without having to supply a password and to see all user not only me. (i have the file open also).
View 1 Replies View RelatedI am trying to be a super user in terminal but I can't. I am sure that I type the correct password, I check also the caps lock button and the language. Also I can't go to the yast. note that the root password is exactly the same as user password
Code:
nobani@linux-m9c6:~> su
Password:
Permissions on the password database may be too restrictive.
su: incorrect password
nobani@linux-m9c6:~>
I am using KDE 4.3.5 on openSUSE11.2
I have a Suse 11.0 Server that has been running for a long time and I have not had to touch it, well I need to get into it today and I forgot the password. So I booted it up with the install disc and got into the rescue mode but I am not sure how or which system to mount to change the root password I tried sda and sda1 but it errored out with unknown system type
View 4 Replies View RelatedToday I have installed Linux SUSE 11.2 . At installation, I was asked for user-name and password. I edit this correctly.
At the end of the installation, the system reboots until the mask 'user name' and 'password' will be displayed. When I edit my user-name and the password the system said, that the login is not correct.
First, I think, I have forgetten my password an do a new installation of Linus SUSE 11.2 . Whatever, the same problem ist still there.
hello i am trying to change my password, but when i type in the new password i get this:"The password is longer than 8 characters. On some systems, this can cause problems. You can truncate the password to 8 characters, or leave it as it is."my question is what kind of problem could i get and how can i change so i have to log in every time i start the computer?
View 9 Replies View RelatedI'm a long time user of Debian, but I'm having trouble with my partitioning process. Here is where I currently stand:
I am installing the latest Wheezy build. I am trying to install debian with an encrypted LVM that spans two hard disks.
My partitioning layout is as:
1. /home
2. /root
3. swap
4. /boot
I then added partitions 1, 2 and 3 to a physical volume group. I then took that physical volume group and added it to a logical volume. Then I encrypted the logical volume, leaving the /boot partition untouched. I was under the assumption that the only partition the system needed free to reach the loading of the LVM is the /boot partition, as it holds the files necessary for booting. But when I attempt to finalize the disk, it gives an error stating, "No root file system detected". That would be an issue as it is currently sitting inside the encrypted LV. Am I wrong in including the root partition in the encrypted LV?
What is the best way of having as little of my file system non-encrypted as possible while still allowing a proper boot?
Here is my system: I have dell poweredge 1950 PERC 6 with 300 GB raid system. It has two disks of each 300GB RAID mirrored system. I have few applications and data that reached around 280GB. As you know, poweredge 1950 we can have only two disk.
They are not mission critical. Hence, I wanted to remove the raid system and use as a non-raid system. By doing it, The applications and data can grow upto 600GB. I do not want to loose the data and setup. I am not so clear about RAID system and its conversion.
I have a RAID array that contains an encrypted volume that I setup using Disk Utility. What I want to do is mount this volume from the terminal and therefore be able to mount at login (as the pass phrase is saved). At the moment I have to manually click on the volume in Nautilus first before using. I've been trying to use the following command to no avail:
Code:
gvfs-mount -mount /dev/md1
which simply returns "Error mounting location: volume doesn't implement mount"
I am trying to get Slackware 12.2 running on a system with two identical harddiscs using RAID-1, LVM and LUKS.
Here is what I get:
Code:
The system is still the same, however, the results of upgrading or installing 12.2 are different. The system refuses to boot. The screen messages during boot seem to suggest, that the RAID system is "seen" by the system, but the encrypted filesystem is not.
I can boot with the installation DVD, however, and
Code:
OpenSuSE 11.1 is by far the best SuSE version in a long time. It's generally up to competition or ahead of it. It's admirable, how thoughtful this system is set up, and how clean and fast it is compared to its predecessors. It ssems, that SuSE is fighting its way back to where they came from before the Novell "merger."
Having said that, it is even harder to understand, IMHO, why the installer doesn't support encrypted root partitions. Of course, there is a manual solution:
http://en.opensuse.org/Encrypted_Roo...ith_SUSE_HOWTO
However, this HOW-TO doesn't explain how to combine LUKS encryption with LVM on a RAID-1 system, as described for Slackware 12.2 here:
[url]
[url]
Is there a similar guide anywhere available for OpenSuSE 11.1?
If not: Would it be possible to do all the low-level setup work, like partitioning, setting up the logical volumes and encrypting everything, with Slackware, following the document above, and then install OpenSuSE 11.1 on that system? Would that work?
I work on a product that have to start automatically an application. Running Opensuse 11.2 So in the inittab I have : 1:2345:once:/root/Velox/VeloxBoot.sh 2:2345:respawn:/sbin/mingetty tty2
In the VeloxBoot.sh, if I don't press any key, my application starts after a timeout. If the user presses a key I want to have a login prompt. Unfortunately, if I start /bin/login, I have a prompt with login, but once I enter my login, it does not ask for a password and it says wrong password
I tried to install new ubuntu on Intel raid 1 system but it said that:
Quote:
The ext4 file system creation in partition #1 of Serial ATA RAID isw_chibcceegh_Volume0 (mirror) failed.
My config is:
P5Q Pro
2x500 GB Seagate HDD
Intel Raid 1
Boot ubuntu from USB Drive (Wonder does this cause the problem?)
My router/adsl modem is not connected to a power supply so when power goes and comes the network will do a re-boot. Now the problem is my OpenSUSE network won't come back on! I set the static ip as Autoeth0 to eth0 however when network updates I losse eth0. Why is this happening? Why doesn't the PC simply re-connect? Can I do it via command line?
View 5 Replies View RelatedI have an encrypted filesystem that I've decided I don't want encrypted anymore. Seems the easiest way to do this is simply reformat the filesystem, but I can't. If I try to do it in YaST2 I get either system error code -3005 (unknown) or -3008 (apparently in use). When I try to do it from the command line I get:
Code:
frylock:/home/joel # umount /dev/sdb5
umount: /dev/sdb5: not mounted
frylock:/home/joel # mkfs -t ext4 /dev/sdb5
mke2fs 1.41.9 (22-Aug-2009)
/dev/sdb5 is apparently in use by the system; will not make a filesystem here!
frylock:/home/joel #
It's unmounted, I don't know how to make it any less in use than that.I can't delete the partition because it's not the last logical partition in the extended partition.
I haven't used encryption previously but through that for better security, I would enable it on one of my disks. I went though the process and when done, copied data to the device etc. My house had a powercut the other day and I noticed that the device did not mount automatically upon restart. Unfortunately, I have forgotten the de-cryption password and have lost access to my data. Is there a way of either recovering my password or getting the partition to mount without the password so I can access the data, copy/back up and then re-create the partition without encryption?
View 2 Replies View RelatedAfter update to 11.4, I would like to regain access to my encrypted home that I left intact. Both user.img and user.key files are there, but when I create the same user again in YaST, it does not recognize their presence and it asks again for size of the image. I am afraid it will just overwrite the old image. I do have full backup of hte data, but since its 150GB, I would rather not have to transfer it again.
How can I remount my old encrypted home?
I was running Ubuntu 9.04 Desktop on a headless Pentium 4 machine which is our file, mail, web & fax server. The two x 250GB SATA hard disks were in a RAID 1 array with full disk encryption. Ran the 9.10 upgrade via WEBMIN and it failed. I should have known then to copy over everything to a backup disk, but instead I rebooted.
On restart the machine accepted my encryption passphrase but promptly hung with a mountall symbol lookup error - code 127. So I can't start the machine to get at the disks, and using a Live CD is useless as it has no way to open the RAID array to get at the encrypted partitions. Although we have data backed up (as at last night) I'd hoped not to have to rebuild the entire server from scratch. But its looking bad.I have taken one drive out and plugged it into another machine (Hercules), and the partitions show up as /dev/sdb1 /dev/sdb2 /dev/sdb3.
If it weren't for RAID, I could open /dev/sdb2 the main partition) in Disk Utility and enter my encryption passphrase to get access. But RAID adds a layer of obstruction that I have not yet overcome. I used mdadm to scan the above partitions and created the /etc/mdadm.conf file, which I edited to show the 2nd drive as missing (rather than risk corrupting both drives). I activated the RAID array with mdadm, and cat shows:
Code:
root@HERCULES# cat /proc/mdstat
Personalities : [raid1]
md1 : active raid1 sdb3[0]
1815232 blocks [2/1] [U_]
[Code]...
I've been searching the web for hours but have yet to find someone with a solution to this situation. If anyone has a thought on how to access this disk I'd be pleased to hear from you. In the meantime I will start building a new (9.10) machine from scratch, without RAID, 'cos that's probably going to be necessary.
I have 2 identical disks originally configured as a pair for a server. Each of the disks has 2 partitions dev/sdb1,dev/sdb2. The sdb1 partitions I had configured as a raid1 mirror. The sdb2 partitions were non-raid and used as extra misc. Space. Further, the raid setup is also encrypted using dm-crypt luks. Now I want to redeploy each of the disks for new purposes. One of the disks i want to deploy exactly as before (keeping the partitions and content), however without being part of a raid array.
I've successfully deployed this disk into a new system and I am mounting the dev/sdb1 partition as dev/md0 because the disk is set to autodetect raid. Actually I am using cryptsetup and mounting with mapper. Can I get rid of the setting for auto detect on this partition without losing the data, or breaking the encryption? I just want to mount the partition as a standalone encrypted disk. Is it as simple as doing crypt setup luksOpen /dev/sdb1 then mounting it with mapper? Or do I need to change the partition in some way. Or do I simply continue to operate it as a 'broken' raid array?
migrate an installed Ubuntu system from a software raid to a hardware raid on the same machine? how would you go about doing so?
View 1 Replies View RelatedI just upgraded my OpenSuSE 11.2 system to 11.3 and have experienced the following problem:
My hard drive was encrypted beforehand, and after the upgrade(which went smoothly) will no longer decrypt. I type in my passphrase at the prompt, press enter and the start up process never resumes. I am able to access the filesystem from the Rescue System option in the install disk. What's strange is that this worked smoothly on another laptop of mine.
I am running OpenSUSE 11.3 GNOME, and I recently reinstalled Windows, and it overwrote GRUB. I only have an Ubuntu LiveCD (I installed with the OpenSUSE DVD), how do I get GRUB back? Note that the Ubuntu LiveCD doesn't recognize the LVM Encrypted partition, so I can't mount it.
View 2 Replies View RelatedI am trying to open an encrypted home directory from opensuse 11.2 with opensuse 11.3. This means i have a user.img and a user.key So far i have done:
losetup /dev/loop3 user.img
cryptsetup luksOpen /dev/loop3 home
Enter passphrase for /dev/loop3:
No key available with this passphrase. At this point it will not accept my passphrase.
A luksDump reveals:
cryptsetup luksDump /dev/loop3
LUKS header information for /dev/loop3
[code]....
When i try to use the key file, i get:
cryptsetup luksOpen /dev/loop3 home --key-file home.key No key available with this passphrase.
I am having a problem setting up an encrypted home directory with openSUSE 11.3. I used Yast User and Group Management to edit an existing user to encrypt the home directory and the user.key and user.img files were created in the /home directory. I tried it out and logged in as user and created a new file. I logged out and logged in as a different user and was able to see the newly created file in the first users home directory.
I figured I did something wrong so I went back to Yast and deleted the user. I deleted the /home/user directory using file manager su mode. I tried again to create a new user with an encrypted home directory using Yast and now when Yast tries to write the changes I get an error: "pam_mount is already setup for user. Use --replace to replace the
existing entry." I do not know how to proceed from here except to try with a different user name as I do not understand what the error message means and what command to use --replace with.
I've chosen to encrypt my swap partition while I was installing opensuse 11.3 on my PC.
I want to know how I can change its password(passphrase)?