How to crypt whole ubuntu installation

[paul roeland]

Sebastian Müsch wrote:

>>
>>Actually, you don't need to recompile the kernel.
> 
> 
> Sorry. I didn't take a look at the 2.6.11-5 patches. You won't indeed not
> need to patch the kernel, as the crypt loopdevice-driver is already patched.

works in standard 2.6.10, also, using the devicemapper (dmcrypt) and not
the loop method.


>>- plus some swap space, leave the rest of the disk unpartitioned
> 
> 
> I won't use swap-space in a secure environment, buying some ram-modules
> instead is the better way. If not please make sure it's encrypted!
> 

of course, the swapspace should be encrypted also. Which is also very
easy to do with devicemapper, btw