--On Thursday, May 29, 2014 12:43:16 PM -0400 zep <zgreenfelder@xxxxxxxxx>
wrote:
> I'm not sure if this is helpful to anyone else and I can't
> decide if it's mildly clever or just a stupid pet trick, really.
[...]
> I put /boot, / and /usr on
> the USB drive, set encrypted partitions for
> swap, /home, /opt, /var and put them as well as
> the boot loader the internal drive. so now the USB
> drive is quite literally acting like a 'key' for whole
> laptop.
You may find this of interest in that case:
<http://www.gno.org/~gdr/sysadmin/centos/6/usb-crypto-key.html>
That configuration has the benefit that if you don't have the
USB key, it does a fail-safe fallback to asking for a crypto
passphrase.
Devin
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
