[Bug 803756] New: Encryption of root partition is not possible
https://bugzilla.novell.com/show_bug.cgi?id=803756 https://bugzilla.novell.com/show_bug.cgi?id=803756#c0 Summary: Encryption of root partition is not possible Classification: openSUSE Product: openSUSE 12.3 Version: RC 1 Platform: x86-64 OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Installation AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: bluedzins@wp.pl QAContact: jsrain@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1 When installing OS 11.4 it was fully possible to create /boot partition (not encrypted) and root partition (encrypted). It makes sense, after booting, user is asked for password, system gets access to root, and booting continues. So I tried to do the similar thing -- I created /boot partition (not encrypted) and root partition (encrypted). Installer refuses to create such config claiming partitions "/ /usr /boot /var" cannot be encrypted. This is regression and not true -- only /boot has really be not encrypted, the rest can, and my working machine (OS 11.4) is a proof of that. For the record -- this bug is present in OS 12.2 as well. Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=803756 https://bugzilla.novell.com/show_bug.cgi?id=803756#c1 Arvin Schnell <aschnell@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID --- Comment #1 from Arvin Schnell <aschnell@suse.com> 2013-02-14 16:54:03 UTC --- openSUSE does not support an encrypted root partition. It supports full-disk encryption using LVM. There are howtos explaining manual setup of encrypted root partition. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=803756 https://bugzilla.novell.com/show_bug.cgi?id=803756#c2 --- Comment #2 from Maciej Pilichowski <bluedzins@wp.pl> 2013-02-14 17:36:55 UTC --- This is odd. Don't you think it should support it -- it is completely valid and useful. Of course it is easier to strip distro from features, but the question is -- what is the reason/benefit?
It supports full-disk encryption using LVM.
It does not make sense, if you put entire disk into encrypted LVM where do you boot from? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=803756 https://bugzilla.novell.com/show_bug.cgi?id=803756#c3 Arvin Schnell <aschnell@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aschnell@suse.com --- Comment #3 from Arvin Schnell <aschnell@suse.com> 2013-02-14 19:49:15 UTC --- What I think is irrelevant. There is no feature request to support an encrypted root partition (at least no approved one). Encryption using LVM was requested in fate #305633 (https://features.opensuse.org/305633). And yes, boot is not encrypted using "full-disk encryption". Sorry for the sloppy language. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com