Encrypt option during installation?

[panzer]

Hi,

Does LMDE give you the choice to encrypt your hard disc during installation? Just like the regular editon LM-9 ?

Thanks

[snaga]

It does not. I am wondering if anyone can help with the best way to encrypt the home partition after install. Can truecrypt do this, and is it the best way?

[guddl]

Unfortunately the installer does not yet feature the option to create an
encrypted home directory. This will be added at a later date.

... this would be a nice feature for the near future.
it's the only reason for me to not install it on my notebook

[mikhou]

I am using Truecrypt with an encrypted container on LMDE. It would make me nervous to encrypt the entire system as a friend of mine borked his solid state hard drive trying to do this in Windows 7 using TC. He's convinced that it was an issue with the SSHD, but it would still make me very nervous.

On the plus side, my TC container works perfectly in LMDE.

mikhou

[LanceHaverkamp]

TrueCrypt, good as it is for some tasks, is nowhere near as secure an LVM encrypted installation. Same for an encrypted home partition; attackers look for stray data in the swap, home, tmp & var/tmp locations. The only way to do it properly is the same way the Debian installer does it...a fully encrypted LVM install.

--Lance Haverkamp

[panzer]

I started to use TrueCrypt and I confess that I like it.
However, I do not like to enter my password every time I use it. Is there a way to bypass this? I mean to auto-mount
the volume on login?

[LanceHaverkamp]

I started to use TrueCrypt and I confess that I like it.
However, I do not like to enter my password every time I use it. Is there a way to bypass this? I mean to auto-mount
the volume on login?

No...it's a security thing.

Well actually, there might be a way to use a pass-file on a flash drive. Shove-in the flash drive & hit the power switch. But I've never tried to do this, so I'd be no help in getting it working. But I bet someone has done it, if you're interested start searching.

[Berkah]

How can I encrypt LMDE (a) during, or (b) after installtion?
Thet's the crucial point for me now regards switching to LMDE or not...

[LanceHaverkamp]

How can I encrypt LMDE (a) during, or (b) after installtion?
Thet's the crucial point for me now regards switching to LMDE or not...

The correct way to do it is with the installer...just like Debian does. That means convincing the Mint powers that be, that it's in their best interest to include an encrypted LVM installation option for the March release.

There are after-the-fact methods to encrypt the /home & /swap partitions; but they are not as secure. If you're interested, search for Debian or Ubuntu instructions for encrypting those partitions.

[gotjazz]

the march release? Which march release? Where do you get march from?

[LanceHaverkamp]

the march release? Which march release? Where do you get march from?

One of the documents floating around near the release date said there was a new disc expected every 6 months.
If that was correct, September to March would be 6 months.
All distros, even the rolling ones, create new install discs to update everything (like the installer). So whether the 6 months I read was correct on not, we're stuck waiting for the next installer update for any hope of an easy encrypted installation.

Footnote: I never could convince Warren Woodford to put an encrypted option in the Mepis installer. It's not difficult, he just didn't want to.

[gotjazz]

hrm I think given the experimental nature of this release we might see something new a whole lot sooner
Anyway - a six month cacly is only known to me about the main edition,

Well - we'll see.

[Berkah]

...Let's hope so!!
(and drink a good "Großer Brauner" in the meantime Greetings to Vienna!)

[specmod0]

they should do a disk every month.. I would think this thing is going to start changing at a rapid rate.

[specmod0]

don't the Debian installer support Encrypt? they in could the Debian installer with mint installer as an advance option. till the mint installer is mature.

[Berkah]

YAAH - Good suggestion!
Would be great and very appreciated!

[Berkah]

Did nothing yet happen since Decemnber 2010????
Still waiting for encryption option during installation of LMDE.... posting.php?mode=reply&f=141&t=55073&sid=51e96a2dd20bc5ac317c49ea015e70b6#

[Epipsychidion]

The easiest way that I've found to do this is to do a minimal install of Debian Testing to an Encrypted LVM partition, and then update the sources.list to the LMDE variant. Takes a little longer, but you end up with an encrypted install.

[netzgewitter]

Since I was testing LMDE inside VirtualBox first, it was not that hard to transfer it from the VM to an encrypted LVM. I made a writeup here:
http://www.netzgewitter.com/2011/09/how ... ard-drive/