5,322
edits
Linux: Difference between revisions
→Encryption
Tags: Mobile edit Mobile web edit |
Tags: Mobile edit Mobile web edit |
||
| Line 680: | Line 680: | ||
==Encryption== | ==Encryption== | ||
For encrypting entire drives, I recommend LUKS.<br> | For encrypting entire drives, I recommend LUKS.<br> | ||
If you want encrypt a directly, you can use fscrypt. | If you want encrypt a directly, you can use fscrypt (ext4 only). | ||
Note that ecryptfs is deprecated and shouldn't be used. | |||
===Encrypt Home After Install=== | ===Encrypt Home After Install=== | ||
| Line 731: | Line 733: | ||
;Notes and Caveats | ;Notes and Caveats | ||
* <code>systemd</code> will no longer have access to your home so all startup apps should be placed elsewhere | * <code>systemd</code> will no longer have access to your home so all startup apps should be placed elsewhere | ||
** E.g. Move all startup scripts in your <code>~/bin</code> to <code>/usr/bin</code> | ** E.g. Move all startup scripts in your <code>~/.local/bin</code> to <code>/usr/local/bin</code> | ||
* <code>ssh</code> will not work until home has been decrypted since the authorized keys are in <code>~/.ssh/authorized_keys</code> | * <code>ssh</code> will not work until home has been decrypted since the authorized keys are in <code>~/.ssh/authorized_keys</code> | ||