В Wed, 10 Jun 2015 09:24:57 -0700
Lew Wolfgang
Hi Folks,
The IA Overlords are rattling their sabres again and are demanding that Whole Disk Encryption be applied to all systems to protect data while its "resting". Basically, if a system is off, all data on non-volatile memory devices has to be encrypted. A TPM can be used for authentication once power is supplied, or the system could prompt for a password before booting.
Would openSuSE, or anything else for that matter, support this kind of a thing? I think TrueCrypt came close, but how would it handle multiple 70-TB partitions?
Yes, creating LVM on top of encrypted partition should work. Downside is that you will need to enter password at least twice - for bootloader to unlock /boot and kernel to unlock / (even if they are on the same filesystem). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org