Re: Feitian PKI donation to dm-crypt projetc

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 5 Nov 2010 15:21:34 +0100, Arno Wagner <arno@xxxxxxxxxxx> wrote to dm-crypt@xxxxxxxx and CC-ed to :
> On Fri, Nov 05, 2010 at 02:48:52PM +0100, Christoph Anton Mitterer wrote:
> > On Thu, 2010-11-04 at 06:31 +0100, Jean-Michel Pour?? - GOOZE wrote:
> > > I would like to encrypt a whole system using dm-crypt. The problem is
> > > that I have to run pcsc prior to mounting partitions. But then pcsc will
> > > need access to libraries, which need to be on a mounted partition.
> > > 
> > > Is there a way around?
> > 
> > Simply include all required stuff (binaries libraries, etc) in the
> > initramfs image.
> > 
> > The (actually booting) kernel and initramfs image need to be unencrypted
> > anyways.
> > 
> > E.g. Debian brings you nice tools to include something in initramfs
> > images + its (library)dependencies (copy_exec).
> 
> An alternative would also be a static compile with the library 
> functions in the executable. That can be a bit painful to do 
> at thimes though and the executable will be pretty large. You
> will also need to the the static libraries for that, AFAIK.
> 

Sources of inspiration I used:
http://en.gentoo-wiki.com/wiki/Booting_encrypted_system_from_USB_stick#Preparing_the_USB_stick 
http://en.gentoo-wiki.com/wiki/DM-Crypt_with_LUKS
http://en.gentoo-wiki.com/wiki/DM-Crypt 

HTH,
Viorel
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux