I recently decided to encrypt the / Linux partition (ext3) on my dual boot PC (Windows Vista - Fedora 10).
I used to mount it with "Ext2 Installable File System for Windows" (http://www.fs-driver.org) when using Windows, but now that the partition is encrypted, its contents (obviously) appear unreadable and I'm offered to format it.
I was told that software like FreeOTFE and TrueCrypt should let me mount the encrypted partition under Windows if I have the ext3 driver, but it didn't work for me. Will I necessarily have to create a new encrypted volume with one of those programs and then reinstall Fedora (or Windows) in it instead of simply mounting the existing encrypted partition?
On Wed, May 20, 2009 at 10:06:04 -0300, Damián Rodríguez Sánchez damian.sanchez@itautec.com wrote:
I recently decided to encrypt the / Linux partition (ext3) on my dual boot PC (Windows Vista - Fedora 10).
I was told that software like FreeOTFE and TrueCrypt should let me mount the encrypted partition under Windows if I have the ext3 driver, but it didn't work for me. Will I necessarily have to create a new encrypted volume with one of those programs and then reinstall Fedora (or Windows) in it instead of simply mounting the existing encrypted partition?
How was it encrypted? If you used luks, it's likely that Truecyrpt won't work with that.
I don't think linux has a way to boot off a Truecrypt encrypted root.
I you want to share a partition between Windows and Linux, I think it will need to encrypted with some application that is available for both, and will not be usable on / (perhaps /home will work for you). If you want it mounted during the boot process you'll probably need to do some customization (make an initscript or and some stuff to rc.local).
Depending on what you are really trying to do, virtualization may be another path to getting what you want.
Bruno Wolff III escreveu:
On Wed, May 20, 2009 at 10:06:04 -0300, Damián Rodríguez Sánchez damian.sanchez@itautec.com wrote:
I recently decided to encrypt the / Linux partition (ext3) on my dual boot PC (Windows Vista - Fedora 10).
I was told that software like FreeOTFE and TrueCrypt should let me mount the encrypted partition under Windows if I have the ext3 driver, but it didn't work for me. Will I necessarily have to create a new encrypted volume with one of those programs and then reinstall Fedora (or Windows) in it instead of simply mounting the existing encrypted partition?
How was it encrypted? If you used luks, it's likely that Truecyrpt won't work with that.
Yes, I think I used LUKS, that's the default during Fedora installation, isn't it?
So I probably won't be able to use TrueCrypt, but FreeOTFE should work: "FreeOTFE supports LUKS to v1.1 of the LUKS specification. This is the latest version at time of writing (2nd December 2007)", according to them.
I guess I'll reinstall Fedora without enabling encryption during the installation process and then log in and try this:
http://www.freeotfe.org/docs/Main/Linux_examples__dm-crypt.htm#level_3_headi...
I don't think linux has a way to boot off a Truecrypt encrypted root.
Yes, I must leave the /boot partition without encryption, is that what you mean? Anyway, I intend to try again with FreeOTFE first.
I you want to share a partition between Windows and Linux, I think it will need to encrypted with some application that is available for both, and will not be usable on / (perhaps /home will work for you). If you want it mounted during the boot process you'll probably need to do some customization (make an initscript or and some stuff to rc.local).
Depending on what you are really trying to do, virtualization may be another path to getting what you want.
I also use virtualization, but unfortunately I sometimes I have to use Windows directly.
Thanks.
On Wed, May 20, 2009 at 11:06:46 -0300, Damián Rodríguez Sánchez damian.sanchez@itautec.com wrote:
I don't think linux has a way to boot off a Truecrypt encrypted root.
Yes, I must leave the /boot partition without encryption, is that what you mean? Anyway, I intend to try again with FreeOTFE first.
I don't think you'll be able to use it for root either, unless you do some customization to the initrd. Getting it to work for /home will probably be significantly easier.
Well, I've already done that: I had my root (/) and even my swap partition encrypted during the installation process and my Fedora works just fine. I'm kind of new at this, but from I've seen in the internet, it seems to be common practice. I just haven't been able to mount the root partition when I boot Windows.
Bruno Wolff III escreveu:
On Wed, May 20, 2009 at 11:06:46 -0300, Damián Rodríguez Sánchez damian.sanchez@itautec.com wrote:
I don't think linux has a way to boot off a Truecrypt encrypted root.
Yes, I must leave the /boot partition without encryption, is that what you mean? Anyway, I intend to try again with FreeOTFE first.
I don't think you'll be able to use it for root either, unless you do some customization to the initrd. Getting it to work for /home will probably be significantly easier.
On Wed, May 20, 2009 at 14:50:24 -0300, Damián Rodríguez Sánchez damian.sanchez@itautec.com wrote:
Well, I've already done that: I had my root (/) and even my swap partition encrypted during the installation process and my Fedora works just fine. I'm kind of new at this, but from I've seen in the internet, it seems to be common practice. I just haven't been able to mount the root partition when I boot Windows.
Yeah, but that's with luks. I was talking about if you switched to Truecrypt so that you could see the partitions under Windows.
However, using the other tool that supposedly handles luks should work.
Damián Rodríguez Sánchez wrote:
I recently decided to encrypt the / Linux partition (ext3) on my dual boot PC (Windows Vista - Fedora 10).
I used to mount it with "Ext2 Installable File System for Windows" (http://www.fs-driver.org) when using Windows, but now that the partition is encrypted, its contents (obviously) appear unreadable and I'm offered to format it.
I was told that software like FreeOTFE and TrueCrypt should let me mount the encrypted partition under Windows if I have the ext3 driver, but it didn't work for me. Will I necessarily have to create a new encrypted volume with one of those programs and then reinstall Fedora (or Windows) in it instead of simply mounting the existing encrypted partition?
I have this bookmarked but I have not tried it as I do not have any windows computers to try it with. It was a "Just in case".
Mounting LUKS / dm-crypt Partitions in Microsoft Windows http://blog.yibble.org/2009/01/29/mounting-luks-dm-crypt-partitions-in-micro...
Full procedure to use Ext2fsd and FreeOTFE.
Ah, ok.
Bruno Wolff III escreveu:
On Wed, May 20, 2009 at 14:50:24 -0300, Damián Rodríguez Sánchez damian.sanchez@itautec.com wrote:
Well, I've already done that: I had my root (/) and even my swap partition encrypted during the installation process and my Fedora works just fine. I'm kind of new at this, but from I've seen in the internet, it seems to be common practice. I just haven't been able to mount the root partition when I boot Windows.
Yeah, but that's with luks. I was talking about if you switched to Truecrypt so that you could see the partitions under Windows.
However, using the other tool that supposedly handles luks should work.
Thank you, but that's exactly what I had done and it kept saying my key was incorrect.
I'll have a better look at my Luks configurations.
Robin Laing escreveu:
Damián Rodríguez Sánchez wrote:
I recently decided to encrypt the / Linux partition (ext3) on my dual boot PC (Windows Vista - Fedora 10).
I used to mount it with "Ext2 Installable File System for Windows" (http://www.fs-driver.org) when using Windows, but now that the partition is encrypted, its contents (obviously) appear unreadable and I'm offered to format it.
I was told that software like FreeOTFE and TrueCrypt should let me mount the encrypted partition under Windows if I have the ext3 driver, but it didn't work for me. Will I necessarily have to create a new encrypted volume with one of those programs and then reinstall Fedora (or Windows) in it instead of simply mounting the existing encrypted partition?
I have this bookmarked but I have not tried it as I do not have any windows computers to try it with. It was a "Just in case".
Mounting LUKS / dm-crypt Partitions in Microsoft Windows http://blog.yibble.org/2009/01/29/mounting-luks-dm-crypt-partitions-in-micro...
Full procedure to use Ext2fsd and FreeOTFE.