Does anyone know any software for whole system drive encryption for Linux, I used to use truecrypt for windows, but truecrypt doesnt support system/OS partition/drive encryption....
View 4 RepliesI would love to be able to use TrueCrypt consistently across all my machines, be they Windows or Linux. As it stands, I can do full-disk encryption with pre-boot authentication only on Windows.
I don't really understand why this is. Are there technical challenges specific to Linux/Mac that make full disk encryption harder? Does anyone know whether TrueCrypt will support this in the near future.
PS. yes, I'm aware that there are other options. My goal is to simplify my life here and use the one tool across all machines.
I just tried to create a qemu qcow2 image with encryption:
Code:
qemu-img create -e -f qcow2 foo.qcow2 100G
Formatting 'foo.qcow2', fmt=qcow2 size=107374182400 encryption=on cluster_size=0
It's some time ago I played with qemu, but I think it's supposed to ask for a password.
If I start the image with
Code:
qemu foo.qcow2
it just says 'QEMU [Stopped]' in the popup terminal window. It starts normally without the encryption option on qemu-img.
Is encryption known to be broken? Is this perhaps specific to qemu with KVM patch or to the 64-bit version?
Ubuntu 9.10
qemu-kvm 0.11.0-0ubuntu6.3
Linux wallace 2.6.31-19-generic #56-Ubuntu SMP Thu Jan 28 02:39:34 UTC 2010 x86_64 GNU/Linux
When I run the following GET commad:
./snmpget -m ALL -M /data/net/naamab/snmp/snmp_mib/ -v 3 -a MD5 -l authPriv -u test1 -A welcome1 -x DES -X privpass 127.0.0.1 NOVELSAT-MODULATOR-MIB::nsModLineCMMode.0 -d
I get the error:
Encryption support not enabled.
snmpget: USM encryption error
I have defined a user (and user, view and access) that should work with encryption:
snmpd.conf:
createUser test1 MD5 welcome1 DES privpass
group debugGroup usm test1
view debugView included .1
access debugGroup "" usm priv exact debugView debugView none
General details:
I am using net-snmp on linux embedded
version 5.5
Configuration (part of it):
./configure --target=mips64-octeon-linux-gnu
--build=mips64-octeon-linux-gnu
--host=i686-pc-linux-gnu
message dump:
Sending 64 bytes to UDP: [127.0.0.1]:161->[0.0.0.0]
0000: 30 3E 02 01 03 30 11 02 04 1D 23 6A FA 02 03 00 0>...0....#j....
0016: FF E3 04 01 04 02 01 03 04 10 30 0E 04 00 02 01 ..........0.....
0032: 00 02 01 00 04 00 04 00 04 00 30 14 04 00 04 00 ..........0.....
0048: A0 0E 02 04 4C 08 7B B5 02 01 00 02 01 00 30 00 ....L.{.......0.
Received 118 bytes from UDP: [127.0.0.1]:161->[0.0.0.0]
0000: 30 74 02 01 03 30 11 02 04 1D 23 6A FA 02 03 00 0t...0....#j....
0016: FF E3 04 01 00 02 01 03 04 24 30 22 04 11 80 00 .........$0"....
0032: 1F 88 80 2D 53 AF 7D 00 00 00 00 00 00 00 08 02 ...-S.}.........
0048: 02 02 CF 02 03 01 11 C5 04 00 04 00 04 00 30 36 ..............06
0064: 04 11 80 00 1F 88 80 2D 53 AF 7D 00 00 00 00 00 .......-S.}.....
0080: 00 00 08 04 00 A8 1F 02 04 4C 08 7B B5 02 01 00 .........L.{....
0096: 02 01 00 30 11 30 0F 06 0A 2B 06 01 06 03 0F 01 ...0.0...+......
0112: 01 04 00 41 01 09 ...A..
I want to add a Lacie external drive to x64 box with SL55, but it has only Firewire interface. After searching a bit the net I could not find a working solution how to make the PCI card and the drive recogizable by the system, even if I removed Firewire from RHEL blacklist. The system does not see this piece of hardware. Does anyone has a positive experience with RHEL/SL with that issue? Similar trends search lists only quite old treads - ane recent experience?
View 18 Replies View RelatedI have a DELL Latitude E6410 64bit with Core i5. My goal is to have my Windows 7 encrypted and my Ubuntu 10.4 unencrypted and to be able to boot them both. So here are the details. I installed windows 7 first. Then I installed Ubuntu and Grub was in the MBR. Then I started TrueCrypt 5 from Windows 7 and encrypted the system partition, not the whole drive! So the TrueCrypt loader overwrote the GRUB in the MBR. Now when I start my computer, I see the prompt for password from the TrueCrypt boot loader. If I enter my password, windows is loaded.
The other option at the beginning is to press Esc and that should offer me other boot loaders. Well, on my DELL there's this Recovery partition and it boots immediately. How I can integrate the Grub in the process. I know, that there are many howto-s on the internet about this problem, but I haven't found a solution for grub2 and windows 7! It is indeed different, because GRUB does not have menu.lst any more and Windows 7 does not have boot.ini!
Here some more info about my partitions:
Code:
/dev/sda1 fat16 DellUtility
/dev/sda2 ntfs RECOVERY
/dev/sda3 unknown
/dev/sda4 extended
- /dev/sda5 ext4 ubuntu
- /dev/sda6 linux-swap
Windows 7 in installed on /dev/sda3 and is encrypted, that's why the file system is unknown.
Ubuntu 10.4 is installed on /dev/sda5
I know of three options to deal with the problem:
Solution 1
Install GRUB to the PBR (partition boot record) of the linux partition - that's /dev/sda5 in my case. Then, it should be possible to load GRUB when you press Esc in the TrueCrypt boot loader.
solution 2
Make Windows load Linux. Copy the PBR of the linux partiotion to a file and copy the file to windows. Then add an entry in the windows loader to include the linux loader file.
solution 3
Make GRUB load TrueCrypt's boot loader. Make a backup of the MBR (containing the TrueCrypt's loader). Add Truecrypt's MBR as a chain boot loader in GRUB. Finally, rewrite the MBR using this new GRUB.
I did install GRUB to my PBR with
Code:
from the live CD:
first mount /dev/sda5 to /media/ubuntu
sudo grub-install --root-directory=/media/ubuntu /dev/sda5
I also tried with
Code:
from inside ubuntu:
> grub
grub> find /boot/grub/stage1
hd0,4
grub> root (hd0,4)
grub> setup (hd0,4)
grub> quit
After one of these, I am able to boot my ubuntu after restart. But then I reboot and load windows, reboot once again and press Esc in order to try to boot ubuntu again, and then I don't see the grub loader list, but the "grub> " shell prompt instead! I thought that I will be able to see the grub loader also after many restarts, not just the first time. Why this configuration "breaks" after 1-2 reboots? Maybe the problem is that my ubuntu is on an extended partition (sda4)?
Is it possible to encrypt the entire drive and not be prompted for the passphrase?
I have a request for a demo of our application and I am looking to create a virtual for VMware's player but need to make sure that the vmdk file cannot be mounted and files pulled from it to protect us from reverse engineering of the application.
I'd like to know if there's a simple way to create a LUKS encryption drive with different passwords? A real one that leads to one set of data, and another that leads to a whole different set of data. Is this even possible with LUKS?
View 1 Replies View RelatedI didn't know if I should have posted this in newbie, hardware, or server. I haven't used tape drives in Linux previously; however I'm trying to figure out how to enable an LTO-4 tape drives built in encryption. Im not that concerned with secure key management, I am looking to just being able to load a key into the drive and get the tape to encrypt. Im for a simple command, but I dont even know where to start. If it varies by device, its an HP Ultrium 4 (1760).
View 2 Replies View RelatedTrying to encrypt my partitions for swap, root and /home directories. However, when I go to partitioner and select the drives as sdb1, sbd2 or sbd3 and click on the encryption. It errors with a -3016 error. Can't find anything in the release notes or the security documentation that would lead me to why this screen is popping.
View 3 Replies View RelatedIs LUKS the best data/system encryption? Or is there one that is even better and stronger?
View 1 Replies View Relatedi have hd encryption activated on my swap and home disks. now every 20 min or so (not really periodic but definetly reproduceable) my system hangs completely for about 4 - 10 sec while the hd led is on. i have a dual core cpu which makes this even more odd. could this be a side effect of hd encryption especially on the swap partition?
View 3 Replies View RelatedI'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything.
But then I came to think about TRIM, and garbage collection on the drive. Will a LUKS encrypted drive affect the garbage collection system? (TRIM).
I am running Red Hat Enterprise Server 6.0 I am having issues getting kerberos configured as a client to join a domain. Im getting below error message. "Failed to join domain: failed to connect to AD: KDC has no support for encryption type"
View 9 Replies View RelatedI plan to use newsbeuter for console RSS reading.This program has a config text file where I need to store my Google account password,in order to access my Google reader.I don't feel easy at making my password readable to everyone.Is there anyway I can somehow encrypt this information ?
View 1 Replies View RelatedI'm trying to write a GUI text encryption application. I wrote the encryption system in a No GUI application like this::
[Code]...
Now I'm trying to write a GUI version, using the same algorithm. Here goes a rough image of my main window code. If you scroll down you'll observe a coloured part. As you see, the text in the first textbox gets copied into clipboard. That is the part where my encryption system should encrypt the data in the clipboard, and copy it again, and later on the new data will be pasted. How am I supposed to write that? If I have to use another signal, what is the receiver of that signal?
[Code]...
I'm trying to install a luks enabled grub for full system encryption. What modules are required by grub to load a normal ubuntu linux system and what is the type to use?
View 2 Replies View Relatedhow to implement a password login system that both sends passwords over the internet in an encrypted form (so my users don't get that annoying message saying "this web site is about to send your password in an unsafe form..." and stores its user data in a MySQL database? This seems to need a combination of mod_auth_digest and mod_auth_mysql.
View 1 Replies View RelatedI'm a long-time windows junkie experimenting with Linux in order to broaden my knowledge spectrum. After failed attempts with no real support from Mandriva, Fedora's seemingly idiot-proof USB installation right from windows was a major turn-on to Fedora. I successfully downloaded and installed Fedora 10 i686 with the Live USB installer and, after a few tries and reformats, got it to boot up, if a bit shaky.
However, certain features of the OS seem to be out of place. Most notably, I can't find any options at all in the lists for "add/remove software." They simply come up as "No package cash is available." or something to that effect. Believe it or not, I had the common sense to search around before posting, but most users who posted with this problem ran a Yum update through the terminal and everything came up yippee-skippee. For me, not so much:
[Code].....
Dear OpenSUSE experts: I am a dual boot computer: Win 7 64 bit and OpenSUSE 11.2 64 bit. This computer has 3 hard drives: SSD, 500GB sata II, 1 TB sata 3. SSD contains openSUSE 11.2 500GB sata II contains Win 7.
Win 7 sees the 500GB sata II drive and the 1 TB sata 3 drive. openSUSE sees the SSD drive and the 500GB windows drive. The Motherboard BIOS sees all 3 hard drives. Is it openSUSE not support sata 3 drive? Or do I have to install special driver for it to see it in OpenSUSE?
I am running Ubuntu 9.04 on a Dell Optiplex SX280 Yesterday the system locked up, and when I rebooted I got stuff like this:
Code:
[ 126.466459] ata3.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[ 126.466464] ata3.00: BMDMA stat 0x24
[ 126.466471] ata3.00: cmd 25/00:20:bf:a2:21/00:01:00:00:00/e0 tag 0 dma 147456 in
[ 126.466473] res 51/40:41:00:a3:21/40:00:00:00:00/e0 Emask 0x9 (media error)
[ 126.466476] ata3.00: status: { DRDY ERR }
[Code]...
I've recently bought the "new" Macbook from Apple. It obviously came with OSX preinstalled. And I'm obviously not satisfied with the way it works, I also need a FAT32 partition so I can share my files between all three OS's. Tricky business. And I thought later on I might try and create me a nice LFS system to learn about Linux and show of to my mates. But doesn't a single hard drive only support up to 4 partitions? So off I went and got Ubuntu running besides Mac. It wasnt recognized by neither the default boot-loader nor rEFIt straight away. I had to hold alt to come up with the special BIOS or something every time I needed to use Ubuntu (always).
I got up to a point where I could run Ubuntu with wireless, sound and pretty much everything working. Until the kernel updates were installed. Somehow I (or maybe it) managed to screw up and booting had become impossible, for it would crash halfway through with kernel errors and other undefined weirdnesses. Meanwhile I had tried installing Windows 7 on a different partition. Which I found to be catastrophic also. I was forced to put up with OSX, which in my opinion is fine at what it does but it doesn't do very much for me. After a couple of tries I had to give up on fiddling with Ubuntu for I needed Windows 7 to run software for school. So my current partition layout looks like this......
I want to put a program (something like GRUB) on my flash drive, so that I can install multiple OS'es, like Ubuntu, Fedora, Dreamlinux, etc. Are there any good programs to do this?
View 6 Replies View RelatedI'm going to replace damaged HDDs in my server with new drives, which have sector size of 4096 bytes instead of 512. Does CentOS natively support such drives? If yes, since which version? If no, what actions should I take to correctly prepare such a drive to work. How to check that such a drive is correctly recognized by OS?
View 3 Replies View RelatedI have minor problem with upgrading a hard drive. I am running an old pentium lll with two hard drives. On the first hard drive I have two partitions of around 90GB each. On the first partition is installed winXP and on the second partition I have Suse 10.3, both booted by grub and living happily side by side. My second hard drive (which is formatted for windows is only 4GB.
My problem arises when I try to replace the 4GB with a 80Gb hard drive. When I disconnect the 4GB drive the system fails to boot up and complains with error 21.
I haven't seen this addressed anywhere & quite frankly a "google" wasn't any help. So I pose the question here.
If I, under M$, turn on the NTFS compression, will that drive still work under LINUX?
My thought is that it won't as I haven't seen any control in LINUX for it.
Any idea, does RHEL5 support NTFS system.??
View 6 Replies View RelatedDoes CentOS 5 support HP EH854A LTO4 External SCSI tape drive?
View 3 Replies View RelatedI want to add Sandy bridge support to linux 2.6.32.20.I have linux kernel 2.6.32.20 ,and Sandy bridge changes were added from kernel 2.6.33.4.Please can anyone suggest how to backport the kernel support for Sandy bridge.
View 2 Replies View RelatedI am building an active directory and using BIND9 as my DNS. To allow for secure dynamic updates from the domain, I am enabling GSS-TSIG as detailed here and here. Unfortunately, some of the commands and configurations used here seem to be depreciated, at least in the newer versions that I'm using. My issue is one of keytab encryption. I generated a keytab using ktpass.exe on the Windows Server 2008 domain controller. I have tried DES/MD5, AES128/SHA1 and AES256/SHA1, each have been turned down by ktutil on the kerberos server (FreeBSD). Each time, it outputs the following error: ktutil: AES256/SHA1*: encryption type AES256/SHA1* not supported *Respective to encryption used.
I cannot find a list of suitable encryption schemes that ktutil will accept. The FreeBSD handbook details a means of producing a keytab file, but I'm not sure how to configure the Domain Controller to use the keytab.