Re: Encrypted root partition

[Chris Marusich]

Mike Gerwitz <address@hidden> writes:

> On Wed, Jan 18, 2017 at 03:38:57 -0800, Chris Marusich wrote:
>> As a bonus, I realized that one could use this feature to encrypt swap,
>> also.  You can encrypt your swap area by using a swap file in the root
>> file system.  Specifically, if you do something like this...
>
> Using an ephemeral key for swap (that is: a temporary key that is
> randomly generated and never stored) is preferred: when you unmount it,
> the data won't be recoverable.
>
> Mounting a normal swapfile, on the other hand, writes swapped memory to
> disk, which opens a host of potential security and forensic issues.
>
> Of course, so does traditional swap. :)
>
> I'm not familiar enough with Guix (yet!) to know how to set it up, but I
> also haven't done any research.  Arch has a good summary:
>
>   https://wiki.archlinux.org/index.php/Dm-crypt/Swap_encryption

Interesting!  Thank you for the additional information.

-- 
Chris

signature.asc
Description: PGP signature