Wed 11 Oct 2017
Disk Encryption
I have encrypted my laptop home folder.
I chose ecryptfs, which is a Linux kernel module maintained by Redhat. I followed the instructions here https://wiki.debian.org/TransparentEncryptionForHomeFolder.
First, clean any junk out of my home folder.
Then reboot, the computer, press Ctrl + Alt + F1
to switch virtual terminals, and login as root.
apt update apt upgrade apt install ecryptfs-utils modprobe ecryptfs echo "ecryptfs" | tee "/etc/modules-load.d/modules.conf" ecryptfs-migrate-home -u glenn # Takes a while
Login as myself again:
ecryptfs-unwrap-passphrase # put in your password, then write down what this spits out
Lastly, log back in as root, and remove the backup home folder rm -rf /home/glenn.urgleblurgle
.
Swap
I did not follow these steps to encrypt my swap partition.
apt install cryptsetup ecryptfs-setup-swap
Alternatives
encfs is supposed to be good, with some limitations:
- file sizes exposed
- file names exposed
gocryptfs is a new way based on encfs and written in Go. It's a bit too new for my tastes though.