+- PINE64 (https://forum.pine64.org)
+-- Forum: Pinebook Pro (https://forum.pine64.org/forumdisplay.php?fid=111)
+--- Forum: Linux on Pinebook Pro (https://forum.pine64.org/forumdisplay.php?fid=114)
+--- Thread: mrfixit custom images? (/showthread.php?tid=8205)
mrfixit custom images? - e-minguez - 11-05-2019
I'm wondering if there is a repo/howto/something to build your own custom mrfixit image (as it seems to be the 'official' one). I want to encrypt the whole disk and I think the best approach will be to create my own image based on the official one.
Thanks!
RE: mrfixit custom images? - Der Geist der Maschine - 11-05-2019
(11-05-2019, 11:34 AM)e-minguez Wrote: I want to encrypt the whole disk and I think the best approach will be to create my own image based on the official one.
That's one of the reasons I went with encrypting my home-partition, only. AFAIK, cpio can handle hardlinks, special files and all that. Might that be an option for you as well?
RE: mrfixit custom images? - e-minguez - 11-06-2019
(11-05-2019, 12:27 PM)Der Geist der Maschine Wrote:(11-05-2019, 11:34 AM)e-minguez Wrote: I want to encrypt the whole disk and I think the best approach will be to create my own image based on the official one.
That's one of the reasons I went with encrypting my home-partition, only. AFAIK, cpio can handle hardlinks, special files and all that. Might that be an option for you as well?
Having /home only encrypted is mostly ok, but /etc /root and some other directories can have sensitive data as well, that's why I'm inclined to full disk encryption. I've seen your blog post about the PBP and how did you encrypted the /home partition, pretty nice!
Let's see if we can achieve full disk encryption when we have a procedure on how to create an image.
Thanks.
RE: mrfixit custom images? - Der Geist der Maschine - 11-06-2019
(11-06-2019, 04:32 AM)e-minguez Wrote: Having /home only encrypted is mostly ok, but /etc /root and some other directories can have sensitive data as well, that's why I'm inclined to full disk encryption. I've seen your blog post about the PBP and how did you encrypted the /home partition, pretty nice!
You can easily move the /root directory into the /home partition (probably just by editing /etc/passwd), but that's not possible for /etc and other directories which are required before the /home partition is unencrypted. So, yes, you need here full disk encryption.