encrypted swap

tuxman · 2006-10-16 01:08:56

can anyone point me to a good howto about how to encrypt the swap partition using dm_crypt on archlinux 7.2?

tuxman · 2006-10-16 01:12:10

well I think I'll try this link... LOL

http://wiki.archlinux.org/index.php/Using_DM-Crypt

tuxman · 2006-10-16 06:51:49

hi,
I've tried the commands suggested in the wiki,

http://wiki.archlinux.org/index.php/Using_DM-Crypt

but I get an error
after I did
#modprobe dm_crypt
#cryptsetup -c aes -s 64 -d /dev/urandom create swap0 /dev/hda4 (my swap partition)
Command failed: device-mapper: reload ioctl failed: invalid argument

also, I added dm_crypt and aes to the MODULE= section of the mkinitcpio-kernel26.conf and created the image.
However, when i check the loeaded modules with lsmod, they are not there anf I have to load them with modprobe.
How would I go about to have those modules loaded at boot?

onearm · 2006-10-16 09:09:31

tuxman wrote:

also, I added dm_crypt and aes to the MODULE= section of the mkinitcpio-kernel26.conf and created the image.
However, when i check the loeaded modules with lsmod, they are not there anf I have to load them with modprobe.
How would I go about to have those modules loaded at boot?

You can add them to the MODULES= section of rc.conf like

MODULES=(aes dm_crypt)

mr.MikyMaus · 2006-10-16 22:05:52

this is interesting.. May I ask why do you want your swap encrypted?

-Miky.

tuxman · 2006-10-16 22:44:30

well alot of sensitive stuff end up in the swap partition unencrypted, for instance passwords and other datas you might usually keep in an encrypted container.
If you want to try it on arch 7.2, check my other post.

http://bbs.archlinux.org/viewtopic.php?p=201786#201786

mr.MikyMaus · 2006-10-16 23:18:20

tuxman wrote:

well alot of sensitive stuff end up in the swap partition unencrypted, for instance passwords and other datas you might usually keep in an encrypted container.

You've got point I never thought about it this way... I see it can make sense on some server or some need-to-be-protected workstation...

But does it make sense on computers where swap is nearly untouched?

Heh, answered myself:) Yes, it does make sense, for example when using suspend-to-disk...

So, my conclusion: Encrypting swap partition(s) makes sense when you need to be sure noone can get any sensitive data from system. I don't think I need it right now, but I may try it sometimes, just out of curiosity. It may become useful once

-M.

Arch Linux

#1 2006-10-16 01:08:56

encrypted swap

#2 2006-10-16 01:12:10

Re: encrypted swap

#3 2006-10-16 06:51:49

Re: encrypted swap

#4 2006-10-16 09:09:31

Re: encrypted swap

#5 2006-10-16 22:05:52

Re: encrypted swap

#6 2006-10-16 22:44:30

Re: encrypted swap

#7 2006-10-16 23:18:20

Re: encrypted swap

Board footer