[Discuss] Encrypt /home and allow unattended boot?

[Jerry Feldman]

I have used LUKS on my work computers for years. My laptop is also
encrypted. Since I use my laptop mainly for Blu events, I decided to
encrypt because I do have some important data, such as ssh keys. With LUKS
you enter your pass phrase on boot up. While you can encrypt single
partitions, remember that some data may still be in swap and maybe in logs.

--
Jerry Feldman <gaf at gapps.blu.org>
Boston Linux and Unix
PGP key id: 537C5846
PGP Key fingerprint: 3D1B 8377 A3C0 A5F2 ECBB  CA3B 4607 4319 537C 5846

On Fri, Sep 27, 2019, 10:07 AM Daniel Barrett <dbarrett at blazemonger.com>
wrote:

>
> I'm thinking about encrypting the /home partition on an Ubuntu box.
> Is there a way to do it so I'm prompted for the decryption passphrase
> when I log in or SSH in, not at boot time? I don't want to enter the
> passphrase during the boot process because I want to permit unattended
> reboots.
>
> I've been reading about disk encryption (never done it before) but all
> I see about unattended reboots is to place a decryption key on the
> boot disk (ugh) which sort of defeats the purpose.
>
> Dan
>
> PS: I sincerely apologize for posting a Linux question, but I couldn't
> think of any new RMS-related material.
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://lists.blu.org/mailman/listinfo/discuss
>