Encrypt Disk After Installation on Fedora
-
How can I do full disk encryption post installation on Fedora?
-
@irj said in Encrypt Disk After Installation on Fedora:
How can I do full disk encryption post installation on Fedora?
Do you need encryption on the OS for some reason? General you'd just encrypt /home. That assumes the system is secured properly in the first place.
I don't know how to enable full day of encryption after installation of the top of my head. Reinstalling is really easy tho, just backup and restore /home. All you're settings should persist with just that, and reinstalling you're programs is easy and quick as well.
-
A fresh install with encryption would be the easiest and safest.
-
@travisdh1 said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
How can I do full disk encryption post installation on Fedora?
Do you need encryption on the OS for some reason? General you'd just encrypt /home. That assumes the system is secured properly in the first place.
I don't know how to enable full day of encryption after installation of the top of my head. Reinstalling is really easy tho, just backup and restore /home. All you're settings should persist with just that, and reinstalling you're programs is easy and quick as well.
hmmm... So no real reason to encrypt the OS? If my laptop is lost, and a someone resets password, will they be able to access my home directory?
-
-
@travisdh1 said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
How can I do full disk encryption post installation on Fedora?
Do you need encryption on the OS for some reason? General you'd just encrypt /home. That assumes the system is secured properly in the first place.
I don't know how to enable full day of encryption after installation of the top of my head. Reinstalling is really easy tho, just backup and restore /home. All you're settings should persist with just that, and reinstalling you're programs is easy and quick as well.
/home would have to be a different volume if he's using LUKS. Ubuntu does /home with ecryptfs. But it has downsides like only being able to use a single password for decryption.
-
@irj said in Encrypt Disk After Installation on Fedora:
@travisdh1 said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
How can I do full disk encryption post installation on Fedora?
Do you need encryption on the OS for some reason? General you'd just encrypt /home. That assumes the system is secured properly in the first place.
I don't know how to enable full day of encryption after installation of the top of my head. Reinstalling is really easy tho, just backup and restore /home. All you're settings should persist with just that, and reinstalling you're programs is easy and quick as well.
hmmm... So no real reason to encrypt the OS? If my laptop is lost, and a someone resets password, will they be able to access my home directory?
No, that's the point of encryption.
-
Sort of related - Is there a best practice guide to "securing" or hardening linux OS flavors?
-
@scottalanmiller said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
@travisdh1 said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
How can I do full disk encryption post installation on Fedora?
Do you need encryption on the OS for some reason? General you'd just encrypt /home. That assumes the system is secured properly in the first place.
I don't know how to enable full day of encryption after installation of the top of my head. Reinstalling is really easy tho, just backup and restore /home. All you're settings should persist with just that, and reinstalling you're programs is easy and quick as well.
hmmm... So no real reason to encrypt the OS? If my laptop is lost, and a someone resets password, will they be able to access my home directory?
No, that's the point of encryption.
So just encrypting the home directory will accomplish what I need?
-
@wrx7m said in Encrypt Disk After Installation on Fedora:
Sort of related - Is there a best practice guide to "securing" or hardening linux OS flavors?
SCAP. The OpenSCAP tools have a lot of good info and checks. The SCAP Workbench tool will also write remediation scripts for you (I actually wrote a couple of the Ansible ones for them).
-
@irj said in Encrypt Disk After Installation on Fedora:
@scottalanmiller said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
@travisdh1 said in Encrypt Disk After Installation on Fedora:
@irj said in Encrypt Disk After Installation on Fedora:
How can I do full disk encryption post installation on Fedora?
Do you need encryption on the OS for some reason? General you'd just encrypt /home. That assumes the system is secured properly in the first place.
I don't know how to enable full day of encryption after installation of the top of my head. Reinstalling is really easy tho, just backup and restore /home. All you're settings should persist with just that, and reinstalling you're programs is easy and quick as well.
hmmm... So no real reason to encrypt the OS? If my laptop is lost, and a someone resets password, will they be able to access my home directory?
No, that's the point of encryption.
So just encrypting the home directory will accomplish what I need?
Yes.
