nomad/wiki-system
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Michel Le Cocq 2020-06-24 09:42:41 +02:00
parent 1c4bcc2b7d
commit d3b53a4d25
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
encrypt-swap-Ubuntu-20.04.md

@ -6,7 +6,7 @@
* install ecryptfs * install ecryptfs
~~~{bat} ~~~{bat}
install apt-get install ecryptfs-utils root@laptop:/root# install apt-get install ecryptfs-utils
~~~ ~~~
## encrypt swap ## encrypt swap
@ -14,20 +14,20 @@ install apt-get install ecryptfs-utils
* turn off current swap * turn off current swap
~~~ ~~~
swapoff -a root@laptop:/root# swapoff -a
~~~ ~~~
* encrypt swap partition * encrypt swap partition
~~~ ~~~
cryptsetup luksFormat --cipher aes-xts-plain64 --verify-passphrase --key-size 256 /dev/nvme0n1p2 root@laptop:/root# cryptsetup luksFormat --cipher aes-xts-plain64 --verify-passphrase --key-size 256 /dev/nvme0n1p2
cryptsetup open /dev/nvme0n1p2 cryptswap root@laptop:/root# cryptsetup open /dev/nvme0n1p2 cryptswap
~~~ ~~~
* set up the crypt partition as swap. * set up the crypt partition as swap.
~~~ ~~~
mkswap /dev/mapper/cryptswap root@laptop:/root# mkswap /dev/mapper/cryptswap
~~~ ~~~
* ajust **/etc/fstab** to use your mapper, replace your encrypt swap device like bellow : * ajust **/etc/fstab** to use your mapper, replace your encrypt swap device like bellow :
@ -45,19 +45,19 @@ cryptswap /dev/nvme0n1p2 none luks
* enable swap * enable swap
~~~ ~~~
swapon -a root@laptop:/root# swapon -a
~~~ ~~~
* edit **/etc/initramfs-tools/conf.d/resume**. Replace the existing **RESUME** line with the following line. * edit **/etc/initramfs-tools/conf.d/resume**. Replace the existing **RESUME** line with the following line.
~~~ ~~~
printf "RESUME=UUID=/dev/mapper/cryptswap" | tee /etc/initramfs-tools/conf.d/resume root@laptop:/root# printf "RESUME=UUID=/dev/mapper/cryptswap" | tee /etc/initramfs-tools/conf.d/resume
~~~ ~~~
* Register these changes. * Register these changes.
~~~ ~~~
update-initramfs -u -k all root@laptop:/root# update-initramfs -u -k all
~~~ ~~~
### to be solve ### to be solve