5,350
edits
Linux: Difference between revisions
→Encryption
| Line 517: | Line 517: | ||
==Encryption== | ==Encryption== | ||
For encrypting external drives, I recommend [[VeraCrypt]]. | For encrypting external drives, I recommend [[VeraCrypt]]. | ||
I do not recommend using Ubuntu's full disk encryption. | |||
If you want to do encryption, just encrypt your home directory using fscrypt. | |||
===Encrypt Home After Install=== | |||
See [[Archwiki: Fscrypt#Encrypt_a_home_directory]]. | |||
See [https://tlbdk.github.io/ubuntu/2018/10/22/fscrypt.html https://tlbdk.github.io/ubuntu/2018/10/22/fscrypt.html]. | |||
;Notes and Caveats | |||
* <code>systemd</code> will no longer have access to your home so all startup apps should be placed elsewhere | |||
** E.g. Move all startup scripts in your <code>~/bin</code> to <code>/usr/bin</code> | |||
* <code>ssh</code> will not work until home has been decrypted since the authorized keys are in <code>~/.ssh/authorized_keys</code> | |||