Root filesystem encryption patch set
Thomas Swan
thomas.swan at gmail.com
Wed Apr 25 11:28:24 UTC 2007
I would like to see these patches make it in for FC7 test4, although it may
be a tight squeeze. Both patches should be against T3. The only thing
missing here is anaconda support, but I will need some help on that. I know
the anaconda support won't be for FC7 but we can make it happen for FC8.
The complete instructions for using the modified versions are posted on
www.cygnetech.com/linux/howtos/index.html<http://www.cygnetech.com/howto/linux_root_encryption.html>It
will be prettier at a later date, but I wanted to get this out to the
community as soon as possible.
In short, with the modified mkinitrd, you can massage a FC6 and FC7 (test3)
CD installation into a fully encrypted installation (sans boot media). The
byproduct is being able to resume a hibernated session from an encrypted
disk as well as detected media for removable keys.
Extra functionality added to mkinitrd is ability to add persistent options
in /etc/mkinitrd.conf ... This also allows for some anaconda flexibility
when generating encrypted installation when we can get to that point.
I'll send this up through bugzilla as soon as I get my password reset.
ARGH! Thoughts and feedback are appreciated.
--
The early bird may get the worm, but the it's the second mouse that gets the
cheese.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/devel/attachments/20070425/d0983704/attachment-0002.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mkinitrd
Type: application/octet-stream
Size: 45539 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20070425/d0983704/attachment-0004.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mkinitrd.patch
Type: text/x-patch
Size: 9371 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20070425/d0983704/attachment-0004.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mkinitrd.8
Type: application/octet-stream
Size: 7107 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20070425/d0983704/attachment-0005.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mkinitrd.8.patch
Type: text/x-patch
Size: 4520 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20070425/d0983704/attachment-0005.bin
More information about the devel
mailing list