Re: Encrypting swap

[Konstantin Svist <fry.kun@xxxxxxxxx>]

On 05/03/2012 01:51 AM, Konstantin Svist wrote:
> I'm setting up a laptop with encrypted btrfs root.
> Problem is, I can't seem to find a way to encrypt the swap so that it 
> would be usable for hibernation.
>
> * Simple setup for encrypting swap uses a random key generated on each 
> boot, so resuming doesn't work.
> * Using the same key for swap & root is not recommended because some 
> tool caches the password, making the whole thing meaningless [1]
> * Using a swap file doesn't work because btrfs is Copy-On-Write, so 
> the filesystem may get messed up by hibernate/resume process.
>
> I'm not sure if the "same key" problem exists in Fedora 16, I've tried 
> setting it up this way and I'm able to boot but not resume.
>
> Any help appreciated!
>
>
>
> [1] 
> https://wiki.archlinux.org/index.php/Talk:System_Encryption_with_LUKS_for_dm-crypt#Suspend_to_disk_instructions_are_insecure


*bump*
Is there a better place to ask this? Perhaps some development ML?

--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org