Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

data drive, I would use eCryptFS or EncFS, or maybe just an encrypted LVM volume (encrypted with dm-crypt +/- LUKS), which can easily be created during installation process (or later using command line tools or blivet-gui.

Take a look at the Arch wiki containing good overview of available methods.

data drive, I would use eCryptFS or EncFS, or maybe just an encrypted LVM volume (encrypted with dm-crypt +/- LUKSdm-crypt/LUKS), which can easily be created during installation process (or later using command line tools or blivet-gui.). Volumes can easily be resized if needed, you can create snapshots, ...

Take a look at the Arch wiki containing good overview of available methods.

data drive, I would use an encrypted LVM volume (encrypted with dm-crypt/LUKS), which can easily be created during installation process (or later using command line tools or blivet-gui). Volumes can easily be resized if needed, you can create snapshots, ...

Take a look at the Arch wiki containing good overview of available methods.

You may wonder why I recommend a software encryption over a maybe faster hardware encryption. That's easy, because it's open-source and free. I don't believe that the OEMs don't have backdoors built into their controllers, probably labelled as recovery function.

data drive, I would use an encrypted LVM volume (encrypted with dm-crypt/LUKS), which can easily be created during installation process (or later using command line tools or blivet-gui). Volumes can easily be resized if needed, you can create snapshots, ...

Take a look at the Arch wiki containing good overview of available methods.

You may wonder why I recommend a software encryption over a maybe faster hardware encryption. That's easy, because it's open-source and free. I don't believe that the OEMs don't have backdoors built into their controllers, probably labelled as recovery function.function. (many other exploits possible, even without compromised firmware)

And again, the Arch Wiki has plenty of information about SEDs