Solved

Full disk encryption with Ubuntu

Posted on 2007-11-29
6
3,280 Views
Last Modified: 2013-12-15
Does anyone know how to do a full disk encryption of Ubuntu 7.10?

Preferably it would store the key on an external USB drive.

0
Comment
Question by:csullins
  • 4
6 Comments
 
LVL 2

Expert Comment

by:SwassLikeMe
ID: 20378285
Use TrueCrypt.  It is free (open-source), and works very well.  It will work precisely for what you want to do.

http://www.truecrypt.org/downloads.php
0
 
LVL 2

Expert Comment

by:SwassLikeMe
ID: 20378342
I should also say that if you intend to use something like this to encrypt even the boot disk itself, you will be unable to do it.  These applications require the operating system be up in order to use them.

If you do want that, then you're looking at something like SafeBoot, that can work with an Alladin eToken or the like.
0
 

Author Comment

by:csullins
ID: 20378387
I should have added that it needs to encrypt everything but /boot :)
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 10

Accepted Solution

by:
Luxana earned 195 total points
ID: 20378766
Hi csullins ,

another option perhaps may be use of LUKS Encryption

http://www.linuxconfig.org/Partition_Encryption
0
 
LVL 2

Expert Comment

by:SwassLikeMe
ID: 20379195
This answers your question.  TrueCrypt can do that.  I thought about what you wanted before, but wasn't sure if it could be done.  This person claims to have done it.
http://forums.truecrypt.org/viewtopic.php?t=7935
0
 
LVL 2

Expert Comment

by:SwassLikeMe
ID: 20379218
One issue I could see is that it would be somewhat difficult, but not at all impossible, to make the "key" file work from a USB flash drive in this case.  The problem you'll find is that the operating system isn't yet fully up, and you're going to be relying on the drivers installed in the kernel to allow you to see a USB flash drive, as well as mount it as a file system to use it.  After all, it's still booting and doesn't yet have access to the root file system.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Rate limit for DNS queries 7 87
Securing Azure Oracle instance of Linux VM 4 67
linux - yum package installation issue 2 69
RHEL 6.7 Gnome Desktop on VMware 6 VM 9 71
Explore the encryption capabilities built into Google Apps and how these features can help you meet privacy policy and regulatory compliance, but are not a full solution. Understand and compare the most popular email encryption services for Google A…
This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question