[opensuse] How to make/mount encrypted USB
I have a 16GB usb drive. In reading some posts here and on the intraweb, I decided it would be good to encrypt this drive. I tried to create a 5G FAT partiion and then an encrypted EXT3 partition. This worked, but i couldn't figure how to see the ext3 partition. I then tried to load and create the partition with trucrypt. this seemed to do something but I could only find instructions on how to make it work in Gentoo and then it was involving visudo stuff that makes no sense. I tried again to simply create one FAT partition that is encrypted but this doesn't seem to show up when I plug in the drive. What do I need to do? (Note: I do not want to resort to the CLI to mount it.) -- kai ponte www.perfectreign.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
2007/9/21, Kai Ponte
I have a 16GB usb drive. In reading some posts here and on the intraweb, I decided it would be good to encrypt this drive.
I tried to create a 5G FAT partiion and then an encrypted EXT3 partition. This worked, but i couldn't figure how to see the ext3 partition.
I then tried to load and create the partition with trucrypt. this seemed to do something but I could only find instructions on how to make it work in Gentoo and then it was involving visudo stuff that makes no sense.
I tried again to simply create one FAT partition that is encrypted but this doesn't seem to show up when I plug in the drive.
What do I need to do?
Maybe this could help http://ubuntu.wordpress.com/2006/01/24/use-an-encrypted-usb-drivepartition/ Regards -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Friday 21 September 2007 12:16, Gabriel . wrote:
I tried again to simply create one FAT partition that is encrypted but this doesn't seem to show up when I plug in the drive.
What do I need to do?
Maybe this could help http://ubuntu.wordpress.com/2006/01/24/use-an-encrypted-usb-drivepartition/
Hmmm, thanks. I'll try that when I get home. It is funny - one reader mentions truecrypt. -- kai ponte www.perfectreign.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2007-09-21 at 12:08 -0700, Kai Ponte wrote:
What do I need to do?
Simple: create an encrypted partition (ext3, reiser, xfs) using Yast. Tell it to mount using ID (in fstab options, perhaps). Better use a loooooooong password.
(Note: I do not want to resort to the CLI to mount it.)
AFAIK, no way. Sorry. As it is usb mounted, you can not use /etc/cryptotab to mount it during boot, but fstab. And as you need to enter a password, you can not use a GUI unless somebody writes it first. I'm not aware in any not interested in finding it :-P And things are a bit different in 10.3, I hear. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFG9QTVtTMYHG2NR9URAhYfAJ9qUyIZFjU5f1w+9bCZb/Bt2YwlxQCeIWpe m+X5x3oIZXxROzLKsvtHAmo= =5KcR -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Saturday 22 September 2007 05:04, Carlos E. R. wrote:
The Friday 2007-09-21 at 12:08 -0700, Kai Ponte wrote:
What do I need to do?
Simple: create an encrypted partition (ext3, reiser, xfs) using Yast. Tell it to mount using ID (in fstab options, perhaps). Better use a loooooooong password.
Ahh, I missed using the ID in fstab options. I saw it but didn't try anything.
(Note: I do not want to resort to the CLI to mount it.)
AFAIK, no way. Sorry.
As it is usb mounted, you can not use /etc/cryptotab to mount it during boot, but fstab. And as you need to enter a password, you can not use a GUI unless somebody writes it first. I'm not aware in any not interested in finding it :-P
And things are a bit different in 10.3, I hear.
Hmm...maybe I'll put 10.3 on the laptop then. I do need to redo my partitions anyway, so that might be a good time. I'd want to simply put the key in and have it pop up with the unencrypted partition (as it does) and then ask for my password for the encrypted one. It would seem that's the obvious method of using such things. This has been a real challenge. I'm suprised at the lack of robustness in the GUI for such things. Even TrueCrypt has a GUI for Wintendo but I have to downgrade to 1980's-era CLI for the Linux version. :( Thanks for your tips! -- kai ponte www.perfectreign.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Saturday 2007-09-22 at 09:28 -0700, Kai Ponte wrote:
Simple: create an encrypted partition (ext3, reiser, xfs) using Yast. Tell it to mount using ID (in fstab options, perhaps). Better use a loooooooong password.
Ahh, I missed using the ID in fstab options. I saw it but didn't try anything.
For two reasons: 10.3 will use it, and because an usb device you will not know in advance which device it will get, so better define an invariant config line using ID. I prefer label, but label is not an option when encrypted.
(Note: I do not want to resort to the CLI to mount it.)
AFAIK, no way. Sorry.
As it is usb mounted, you can not use /etc/cryptotab to mount it during boot, but fstab. And as you need to enter a password, you can not use a GUI unless somebody writes it first. I'm not aware in any not interested in finding it :-P
And things are a bit different in 10.3, I hear.
Hmm...maybe I'll put 10.3 on the laptop then. I do need to redo my partitions anyway, so that might be a good time.
I'd want to simply put the key in and have it pop up with the unencrypted partition (as it does) and then ask for my password for the encrypted one. It would seem that's the obvious method of using such things.
But somebody has to create such a gadget. You can open a bugzilla as a feature request. Notice that the encrypted partition is not automatically detected as such, it needs a precise config file with the proper options. I suppose it might be doable, but notice the lack of general interest in this thread and consider it as a measure of how many people would want such a gui (they are not even interested in encrypted partitions, it seems). I'd frankly prefer developers "wasting" sometime writing a proper howto doc, than writing a gui.
This has been a real challenge. I'm suprised at the lack of robustness in the GUI for such things. Even TrueCrypt has a GUI for Wintendo but I have to downgrade to 1980's-era CLI for the Linux version.
:(
CLI is safer and better :-P - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFG9dAktTMYHG2NR9URAkEAAJ0WBRxSu+lu1I3+XkZN0PUZD6wnNgCdFoNN elS9ocKizpKKOYqSh5lvZ0E= =iEM1 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Carlos E. R.
-
Gabriel .
-
Kai Ponte