Am Montag, den 27.03.2006, 08:49 +0100 schrieb Gabor Walter:
Hi,
I want to encrypt my entire /home directory which is on a separate
partition. I used cryptsetup which is available in FC5. I successfully
created the encrypted partition and I also found a script at
http://www.saout.de/tikiwiki/tiki-index.php?page=luksopen which I
would like to incorporate into my startup. The question is, where
exactly?
Should I (can I) modify rc.sysinit?
Or should I just put it into rc.local?
If have put it in rc.local like:
sh /root/mount.encrypt.sh
and the Script to mount my USB-Stick with the key look like:
~ $ cat mount.encrypt.sh
#! /bin/sh
# simple script
# to mount the usb-stick with the encryption key
# put this into you rc.local wherever it sits on you machine
#
#
# sd card in the pmcia-slot
DEVICE=/dev/hda1
MOUNTPOINT=/media/idedisk
## my usb stick
DEVICE=/dev/sdb1
MOUNTPOINT=/media/Datenknecht
if [ -e $DEVICE ]; then
echo -n "mounting /home [$DEVICE as $MOUNTPOINT]"
while (mount $DEVICE $MOUNTPOINT 2> /dev/null; [ $? -ne 0 ]); do
echo -n "."
sleep 1
done
if [ -e $MOUNTPOINT/m70Key.gpg ]; then
modprobe aes
modprobe cryptoloop
while (cat $MOUNTPOINT/m70Key.gpg |mount -p0 /home 2> /dev/null;
[ $? -n e 0 ]); do
echo -n "+"
sleep 1
done
umount $MOUNTPOINT
echo " done."
else
echo " failed."
fi
fi
Hope this helps
Reinhard
> This is what I tried, but then I keep getting a message that /home
> needs a file system check and is corrupt (this sounds logical, because
> at this point the partition is neither opened nor mounted).
> So it looks to me like a real catch-22.
> TIA for any suggestions.
> Gabor Walter
> Hungary
> --
> fedora-list mailing list
> fedora-list(a)redhat.com
> To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-list