Linux

47969 readers

1016 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago

MODERATORS

[email protected]

Encrypt whole system? (sh.itjust.works)

submitted 2 months ago by [email protected] to c/[email protected]

67 comments fedilink hide all child comments

My laptop isn't under my supervision most of the time. And I'd hate it if someone were to steal my SSD, or whole laptop even, when I'm not around. Is there a way to encrypt everything, but still keep the device in sleep, and unclock it without much delay. It's a very slow laptop. So decryption on login isn't viable, takes too long. While booting up also takes forever, so it needs to be in a "safe" state when simply logged out. Maybe a way that's decrypt-on-demand?

I'm on Arch with KDE.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 2 months ago* (last edited 2 months ago) (8 children)

Maybe systemd-homed is the solution you are looking for. The arch wiki has a page for it. And this can be better for your use case because only your home folder needs decryption and not the whole drive.

There is this to keep in mind since you are using KDE, but can be easily fixed: https://wiki.archlinux.org/title/Systemd-homed#Home_directory_remains_active_after_logging_out_of_Plasma

[–] [email protected] 2 points 2 months ago (7 children)

Sounds perfect. I'll need more sources to understand what it's doing and how to config it. Thanks!

[–] [email protected] 2 points 2 months ago (6 children)

Systemd has a good guide on how to use it https://systemd.io/HOME_DIRECTORY/

And they also have a guide on migrating a traditional user home to this. Do remember to take backups if going this route https://systemd.io/CONVERTING_TO_HOMED/

I personally used the arch wiki when I set it up https://wiki.archlinux.org/title/Systemd-homed

There is not much config.

I think the command I used for my laptop was:

homectl create <name> --storage=luks --shell=/usr/bin/fish --member-of=wheel

https://wiki.archlinux.org/title/Systemd-homed#Creation

Gnome is working on a gui for this, but it will probably be a while until that is out. I feel like it is pretty safe to use the cli for this one.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

Hehe, Thank you. But by the time I'm reading this I've already done it. Got stuck on a couple or roadblocks, but figured it out. I got scared when I didn't "enable" the service just "start" it. I'm not safe(-ish enough). :D

edit: well not the plasma fix. wiki said if it's a problem I need to start something, and that something should be on by default. So I didn't do anything, maybe that's a problem

load more comments (5 replies)