Mailinglist Archive: opensuse-factory (355 mails)

< Previous Next >
Re: [opensuse-factory] Will openSUSE adopt systemd-homed?
  • From: Axel Braun <axel.braun@xxxxxx>
  • Date: Tue, 17 Mar 2020 20:57:53 +0100
  • Message-id: <4446037.IJAqTIAFIl@t520.axxite.internal>
Am Dienstag, 17. März 2020, 19:43:19 CET schrieb Vojtěch Zeisek:
Dne úterý 17. března 2020 19:27:07 CET, Christian Dywan napsal(a):
On 3/17/20 6:07 PM, Thorsten Kukuk wrote:
On Tue, Mar 17, andythe_great wrote:
Systemd 245 was released with support for systemd-homed.
There are many interesting features about encryption as well. If
I understand correctly, the systemd-homed can encrypt individual
home directory and does not need normal full disk encryption that
has been normally done. Could this solve typing password twice
when decrypting disk on default setup as well?

No, this has nothing to do with your full disk encryption. It's to
have your home portable on an USB stick, not on your harddisk and
has still some problems.
And to encrypt your home directory you don't need full disk
encryption. It's enough to encrypt your home.

I imagine if Lennart could read this he'd scream :wink: In his talks
he explains that by design it's portable but the primary use case is
encrypting your home as well as your user configuration (passwd,
group) and have it in one place on your local disk.
So for all intents and purposes I'll say Yes, it is an alternative
to full-disk encryption via LUKS as OpenSUSE optionally sets it up
for you, or in the way Ubuntu would setup ecryptfs for your home
directory, if you chose encryption in the installer.

I never got why to encrypt just disk when there are bunch of data leaking
via /tmp. is a good reason to just
encrypt /home


To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >