nomad/wiki-system
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
13aa7a28d9
wiki-system/encrypt-swap-Ubuntu-20.04.md
Michel Le Cocq 13aa7a28d9 ///
2020-06-23 09:42:29 +02:00

2.1 KiB
Raw Blame History

encrypt swap partition

sources :

apt-get install ecryptfs-utils
swapoff -a
cryptsetup luksFormat --cipher aes-xts-plain64 --verify-passphrase --key-size 256 /dev/nvme0n1p2
cryptsetup open /dev/<device> cryptswap
mkswap /dev/mapper/cryptswap
Configure l'espace d'échange (swap) en version 1, taille = 31,1 GiB (33420210176 octets)
pas d'étiquette, UUID=4fd1ffc-6d5b-450a-9737-abf1ffb80b1

edit : /etc/default/grub

GRUB_CMDLINE_LINUX_DEFAULT="quiet splash resume=UUID=4fd1ffc-6d5b-450a-9737-abf1ffb80b1"

update-grub

Now ajust /etc/fstab to use your mapper, replace your encrypt swap device like bellow :

/dev/mapper/cryptswap   none   swap   discard   0   0

add your encrypt swap device define in /etc/crypttab

cryptswap   /dev/nvme0n1p2		none	luks

swapon -a

/!\ ici faut trouver comment on recupere le blkid de la partition swap

printf "RESUME=UUID=/dev/mapper/cryptswap" | tee /etc/initramfs-tools/conf.d/resume

Register these changes.

update-initramfs -u -k all

to be solve

cryptsetup: ERROR: Couln't resolve device rpool/ROOT/ubuntu_...
cryptsetup: WARNING: Couln't determine root device

disable encrypt swap partition

  • Turn off swap
swapoff /dev/mapper/cryptswap1

  • remove your encrypt swap device define in your /etc/crypttab

  • ajust /etc/fstab to use your real swap partition

/dev/nvme0n1p2   none   swap   discard   0   0
  • Change your /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT to
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash resume=/dev/nvme0n1p2"

update-grub
  • edit /etc/initramfs-tools/conf.d/resume. Replace the existing RESUME line with the following line.
RESUME=/dev/nvme0n1p2

Register these changes.

update-initramfs -u -k all
  • make your partition a swap
mkswap /dev/nvme0n1p2
  • activate swap
swapon -a