Author: pfrields
Update of /cvs/docs/install-guide/devel/en_US In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv6410
Modified Files: diskpartitioning.xml Log Message: Make some changes to support encryption and resizing functions
Index: diskpartitioning.xml =================================================================== RCS file: /cvs/docs/install-guide/devel/en_US/diskpartitioning.xml,v retrieving revision 1.21 retrieving revision 1.22 diff -u -r1.21 -r1.22 --- diskpartitioning.xml 10 May 2008 14:40:04 -0000 1.21 +++ diskpartitioning.xml 12 May 2008 02:01:24 -0000 1.22 @@ -363,6 +363,48 @@ </note> </section>
+ <section id="sn-understanding-encryption"> + <title>Understanding Encryption</title> + <para> + &DISTRO; includes functions to encrypt your storage. You may find + this function useful if you have a laptop or if you worry about + your disk storage falling out of your control. This disk + encryption requires you to provide an additional passphrase at + boot time or whenever you first access the disk storage. + </para> + <para> + You may choose to encrypt either all partitions, or only selected + ones. A typical use case includes encrypting partitions + containing <filename class="directory">/home</filename>, <filename + class="directory">/var</filename>, and <filename + class="directory">/tmp</filename>, along with the swap partition. + There is usually no need to encrypt <filename + class="directory">/usr</filename>, since this directory usually + contains only system executables and libraries that have no + intrinsic privacy value. The <filename + class="partition">/boot</filename> partition is never encrypted + and should not be used for sensitive data. + </para> + <note> + <title>Encrypted Storage Performance</title> + <para> + Storage encryption creates a slight performance decrease. You + may wish to weigh this drawback against the benefits of security + and privacy that encryption provides. + </para> + </note> + <para> + To make the encryption effective, choose a good passphrase. You + can find more information about good passphrases in <xref + linkend="ch-rootpassword"/>. + </para> + <para> + The encryption provided uses the Linux Unified Key System + (<acronym>LUKS</acronym>) for encryption. For more information on + LUKS, refer to <ulink url="http://luks.endorphin.org/"/>. + </para> + </section> + <section id="sn-partitioning-advice"> <title>Advice on Partitions</title> <para>Optimal partition setup depends on the usage for the Linux @@ -553,7 +595,6 @@ </para> </listitem> </varlistentry> - <varlistentry> <term><guilabel>Create custom layout</guilabel></term> <listitem> @@ -567,6 +608,11 @@ </varlistentry> </variablelist> <para> + Select <guilabel>Encrypt system</guilabel> to encrypt all + partitions except the <filename class="partition">/boot</filename> + partition. + </para> + <para> Select <guilabel>Review and modify partitioning layout</guilabel> to customize the set of partitions that &DISTRO; creates, to configure your system to use drives in RAID arrays, or to modify @@ -600,10 +646,10 @@ </para> <para> If you do not select an option to customize the partition layout, - proceed to <xref linkend="ch-bootloader"/>. If you choose + proceed to <xref linkend="sn-disk-changes"/>. If you choose <guilabel>Create custom layout</guilabel> or <guilabel>Review and modify partitioning layout</guilabel>, proceed to <xref - linkend="sn-partitioning-general"/>. + linkend="sn-disk-druid"/>. </para>
</section> @@ -651,12 +697,13 @@ Select this option to add a partition <indexterm> <primary>partition</primary> - <secondary>adding</secondary> - </indexterm> or LVM physical volume to the disk. In the - <guilabel>Add partition</guilabel> dialog, choose a mount - point and a partition type. If you have more than one disk - on the system, choose which disks the partition may inhabit. - Indicate a size in megabytes for the partition. + <secondary>adding</secondary> </indexterm> or LVM physical + volume to the disk. In the <guilabel>Add + partition</guilabel> dialog, choose a mount point and a + partition type. If you have more than one disk on the + system, choose which disks the partition may inhabit. + Indicate a size in megabytes for the partition. If you + wish to encrypt the partition, select that option. </para> <important> <title>Illegal Partitions</title> @@ -727,9 +774,16 @@ this effect, not an error or bug. </para> </note> + <para> + Select the <guilabel>Encrypt partition</guilabel> option to + encrypt all information on the disk partition. + </para> <para> After you enter the details for your partition, select - <guibutton>OK</guibutton> to continue. + <guibutton>OK</guibutton> to continue. If you chose to + encrypt the partition, the installer prompts you to assign a + passphrase by typing it twice. For hints on using good + passphrases, refer to <xref linkend="ch-rootpassword"/>. </para> </listitem> </varlistentry> @@ -777,10 +831,17 @@ those used on some Windows operating systems </para> </listitem> + <listitem> + <para> + resize an existing <systemitem + class="filesystem">NTFS</systemitem>, <systemitem + class="filesystem">ext2</systemitem>, or <systemitem + class="filesystem">ext3</systemitem> partition + </para> + </listitem> </itemizedlist> <note> <title>Windows Partitions</title> - <para> You may not label Windows partitions that use the <indexterm> @@ -979,6 +1040,21 @@ installation process. </para> </section> + + <section id="sn-disk-changes"> + <title>Making Disk Changes</title> + <para> + To proceed, the installer makes important changes to the disk + configuration. This is the last point at which you can quit the + installer and still retain your original system configuration. If + you have chosen to resize existing Windows NTFS partitions without + erasing or formatting them, the data in those partitions is + retained. + </para> + <para> + Select <guilabel>Write changes to disk</guilabel> to proceed. + </para> + </section> </chapter>
<!--