@neurovagrant same...

I did the ardurous process of migrating all my stuff from #NTFS to #LUKS-encrypted #ext4 on all drives and it just works so flawlessly on every Linux machine...

In fact, there are even Apps for those, but they can only deal file containers, not encrypted drives...
https://f-droid.org/de/packages/com.sovworks.edslite/

But to shove just media around, #ext4 will work just fine...

Uncryptroot-unlock with dropbear doesn't launch my ubuntu #boot #mount #luks

https://askubuntu.com/q/1484987/612

OK, it’s 4 AM – such a typical time to end an install :blobmelt:

But it is done …well, the basic install at least of my #EndeavourOS on #Slimbook (on #Btrfs in #LUKS).

I have to say, this was surprisingly painless, thanks to the #Calamares installer.

https://matija.suklje.name/first-steps-of-the-installation

TL;DR:

• password-protect your BIOS!
• Btrfs + LUKS was super easy
• using GNU #GRUB now, might change to #rEFInd later
• DPS is a thing I need to read more about

My #Slimbook / new laptop adventure continues! And with it a new blog post:

https://matija.suklje.name/installation-plans-for-my-new-laptop

TL;DR:

• why I decided for #EndeavourOS on a #Btrfs #RAID-1 on two #LUKS encrypted SSDs and not something else
• how I intend to mitigate the challenges this combination brings with it
• how to leverage #Tmpfs to make your SSD live longer and make your browser much faster
• #Borg in a great backup tool
• #Wayland … I hope

Finally got my encrypted #LUKS setup on #gentoo working. I really don’t know why the bootloader didn’t open the volume previously, but now it works and maybe this is helpful for others: https://tobi.byte23.net/posts/encrypted-gentoo/

@Theholypumpkin @toby well, unlike @bunsenlabs and @ubuntu on #amd64, @Raspberry_Pi & #Ubuntu on #RaspberryPi doesn't support #LUKS or setting up #FullDiskEncryption at all.
Which IMHO is not excuseable since even if the #Broadcom-made #SoC didn't have any Cryptograpy-Acceleration integrated whatsoever, the performance of #AES256 is still faster than any microSD or eMMC on the market.
Espechally since that feature predates the Raspberry Pi by over half a decade: even @opensuse 10.2 offered it.

@Theholypumpkin @toby @bunsenlabs

Also one major "can't use" for me - regardless of #ChipShortages and #Scalpers - is the lack of a convenient #LUKS #Encryption setup in both #RaspberryPiOS and @ubuntu / #Ubuntu for @Raspberry_Pi / #RaspberryPi.

Not gonna argue the lack of @tails or official @torproject #TorBrowser but to make #FullDiskEncryption viable and useable, it just can't be restricted to external media or having to manually fiddle around, cuz that's a pain in the rear.

I'm setting up an #ArchLinux with encrypted (#LUKS) root partition (an #LVM volume) The /boot partition is left *unencrypted*. I want to decrypt my root partition through #ssh.

I'm following this guide, with #GRUB and #dropbear : https://s.42l.fr/bFl-G4_w

I'm facing two big problems:
1 - dropbear starts *after* a passphrase is provided for the root partition;

2 - dropbear fails to load dropbear_dss_host_key and dropbear_ed25519_host_key.

#cybersecurity #sysadmin

La partie facile, c'était de configurer le Wake-on-LAN sur le réseau local. C'est assez satisfaisant de pouvoir faire
```
wol <Adresse MAC cible>
```
et de voir Dusk s'éveiller.

Maintenant, j'essaye de configurer le déchiffrement de la partition root (#LUKS) via #SSH.

A new "Your own extras" is available:

Check the new "Donation list" to support your favourite free and open source software.
It includes all the #donation links with all the listed #tutorials and #services we provide.

https://wiki.techsaviours.org/en/extras/donation_list

Still missing links:
- #lvm
- #luks
- #networkmanager
- #zram
- #sddm
- #firewalld
- #cronie ( #crontab )
- #rsync
- #AdGuardHome
- #redis
- #docker
- #LibreWolf
- #arkenfox
- #CustomNewTabPage
- #ProxySwitchOmega
- #Icecraven

#foss #donate

Decrypt LUKS partition automatically if part of a defined network? #networking #luks

https://askubuntu.com/q/1482077/612

One thing that kinda pisses me off about @tails is that it's #PersistentStorage - which is just a fancy name for #LUKS encryption - is absurdly restrictive and the #setup doesn't even want to work.

Like yes there's a reason I'm booting the #ISO via #Ventoy [ https://www.ventoy.net/en/index.html ] and yes I want to use the vacantly kept 8GiB at the end of the flashdrive to be useable as for persistent storage and no, I need that drive to be as is since it's a #multiboot drive designed to be easily updated.

@annskaja WASN DAS FÜR NE #CyberfaschistischeKackshice?

Wegen sowas muss mensch effektiv Schutzsuchenden quai nen Crashkurs in #digitalerSelbstverteidigung geben...

Glücklicherweise sind #MicroSD-Karten gut versteckbar und mit #LUKS auch sicher verschlüsselbar ...

Ended up doing the following:

- boot #ArchLinux install media
- open #LUKS container
- mount #btrfs subvolume(s)
- shrink btrfs root FS `btrfs filesystem resize -32G /mnt`
- qurey new root FS size in KiB `btrfs filesystem show --kbytes /mnt`
- resize LUKS to new btrfs root FS size `cryptsetup resize --device-size <btrfs root FS size in KiB>K <LUKS mapper name>` (note the K unit)
- `umount -R /mnt`
- close LUKS container
- shrink LV
- add swap LV
- add swap entry to /etc/crypttab.initramfs

😮‍💨️

Also, side note:

Is LUKS on LVM such an exotic setup? All the websites I found explaining resizing #LUKS partitions in conjunction with #LVM were specifically about LVM on LUKS

Had to jump through quite a few hoops to figure out how resizing worked when the LUKS container is stacked on top of LVM (instead of the other way around like most people seem to be doing it?)

Resizing my #LUKS on #LVM setup to make room for an actual swap partition

Oh god
Oh fuck :blobcatsweats:

Pray I don't fuck it up

My #solokeys V2 arrived today

Time to get nerdy with it 🤩

#fido2 #WebAuthn #Linux #LUKS

OMG! I did it!! First try and it worked.

Okay guys, this is complex, and I will need to document it. Can you suggest where I can publish an article about it? To repeat, my end result now is:
Dual Boot: Windows 10 Ameliorated + Debian 12 with LUKS Full Disk Encryption.

The article will describe the Debian part including the manual partitioning for LUKS. All GUI driven.

#linux #debian #luks #encryption #dualboot #windows #goodbyeubuntu

I’m in the process of replacing my #ubuntu with #debian. But I’m on dual boot machine. And I need Debian + #LUKS. It looks a bit of a nightmare compared to the #Ubuntu wizard. I’m so lost. Has anyone done this before, preferably via the gui wizard?

#encryption #dual #boot #lvm #linux

Just got notified my #solokeys V2 I backed in 2021 are arriving this week 🤩

I’ll finally be able to do all the nerdy things with #Linux, #LUKS, sudo, #fido2 and #WebAuthn again