Jump to content

Full Disk Encryption: Difference between revisions

m
The easiest way is to use the graphical installer and choose „encrypt“ while doing the installation.
imported>Ulinja
(add section on unlocking secondary drives)
m (The easiest way is to use the graphical installer and choose „encrypt“ while doing the installation.)
 
(3 intermediate revisions by 3 users not shown)
Line 1: Line 1:
There are a few options for full disk encryption.
There are a few options for full disk encryption. The easiest way is to use the graphical installer and choose „encrypt“ while doing the installation.


= Enter password on Boot (LVM on LUKS) =
= Enter password on Boot (LVM on LUKS) =
Line 29: Line 29:
     boot = {
     boot = {
       loader = {
       loader = {
         canTouchEfiVariables = true;
         efi.canTouchEfiVariables = true;
         grub = {
         grub = {
           enable = true;
           enable = true;
Line 242: Line 242:
* Have a look at https://wiki.archlinux.org/index.php/Disk_encryption to see all the possible options. This wiki page is not complete.
* Have a look at https://wiki.archlinux.org/index.php/Disk_encryption to see all the possible options. This wiki page is not complete.
* [https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f Installation with encrypted /boot]
* [https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f Installation with encrypted /boot]
* [[Remote LUKS Unlocking|Using Tor and SSH to unlock your LUKS Disk over the internet]].
* [[Remote disk unlocking|Using Tor and SSH to unlock your LUKS Disk over the internet]].
* [[Bcachefs]], filesystem which supports native encryption
 
 
[[Category:Desktop]]
[[Category:Server]]
trusted
602

edits