[Blueprint encrypted-swap-by-default] Encrypted Swap By Default

Roderick B. Greening roderick.greening at gmail.com
Tue Nov 25 22:17:07 GMT 2008


Blueprint changed by Roderick B. Greening:

Whiteboard changed to:

(steve.langasek) When I migrated my laptop from hardy to intrepid, I
turned on encrypted swap at the same time (swap LV on top of
LVM+encryption).  Anything that makes heavy use of swap on my desktop
now brings the whole system to its knees.  Please be cognizant of
performance issues when implementing this - I fear this may be untenable
as a default for desktop systems.

(Roderick Greening) It would never be expected to encrypt a swap file
which exists in a LVM encrypted drive. Given that to build a LVM system,
you have to use the alternate cd, the user would be in total control of
these choices. Via the regular live CD/DVD, LVM is not a option (that I
recall), so encrypting the swap by default should not be problematic.

-- 
  Encrypted Swap By Default
  https://blueprints.launchpad.net/ubuntu/+spec/encrypted-swap-by-default



More information about the Ubuntu-server-bugs mailing list