On Fri, Jun 28, 2013 at 05:21:34PM +0200, J.Witvliet@xxxxxxxxx wrote: > -----Original Message----- > From: users-bounces@xxxxxxxxxxxxxxxxxxxxxxx [mailto:users-bounces@xxxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Fred Smith > Sent: Friday, June 28, 2013 3:42 PM > To: users@xxxxxxxxxxxxxxxxxxxxxxx > Subject: retrofitting LUKS encryption on installed system > > I've got a F19 installation that I'd like to turn into a fully encrypted > system with LUKS. > > There are many howtos on the web for encrypting a partition, but they > all show doing it to /home. > -----Original Message----- > > No, just re-install. > One partition with /boot and another with an encrypted volume-group, holding /, swap and the rest. > > But before embarking on that trip, do you really need full disk encryption? > I mean, the content of /usr is on any fedora-cd ;-) And when up-and-running, everything is unlocked. > > The only valid reason I can think about, is that other people have physically access to your machine and could get root-access by booting from cd/dvd, and might alter your system. Well, I have employer VPN information, ssh keys allowing me to ssh into my own home system, and sometimes customer's VPN (and possibly other) information on it too, so for all those reasons it has seemed like encrypting the whole thing would make sense. Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge ----------------------------- -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
