On Fri, 5 Nov 2010 15:21:34 +0100, Arno Wagner <arno@xxxxxxxxxxx> wrote to dm-crypt@xxxxxxxx and CC-ed to : > On Fri, Nov 05, 2010 at 02:48:52PM +0100, Christoph Anton Mitterer wrote: > > On Thu, 2010-11-04 at 06:31 +0100, Jean-Michel Pour?? - GOOZE wrote: > > > I would like to encrypt a whole system using dm-crypt. The problem is > > > that I have to run pcsc prior to mounting partitions. But then pcsc will > > > need access to libraries, which need to be on a mounted partition. > > > > > > Is there a way around? > > > > Simply include all required stuff (binaries libraries, etc) in the > > initramfs image. > > > > The (actually booting) kernel and initramfs image need to be unencrypted > > anyways. > > > > E.g. Debian brings you nice tools to include something in initramfs > > images + its (library)dependencies (copy_exec). > > An alternative would also be a static compile with the library > functions in the executable. That can be a bit painful to do > at thimes though and the executable will be pretty large. You > will also need to the the static libraries for that, AFAIK. > Sources of inspiration I used: http://en.gentoo-wiki.com/wiki/Booting_encrypted_system_from_USB_stick#Preparing_the_USB_stick http://en.gentoo-wiki.com/wiki/DM-Crypt_with_LUKS http://en.gentoo-wiki.com/wiki/DM-Crypt HTH, Viorel _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
