From d6aeaac228a573cdfc242213c95db9a11a263d7d Mon Sep 17 00:00:00 2001 From: Richard Laager Date: Sat, 6 Oct 2018 20:41:21 -0500 Subject: [PATCH] Debian: Drop encrypted swap Nowhere else in the Debian guide is encryption supported. This makes reference to "encrypted home directory later", which does not exist. --- Debian-Stretch-Root-on-ZFS.md | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/Debian-Stretch-Root-on-ZFS.md b/Debian-Stretch-Root-on-ZFS.md index 0d03d7b..af3909f 100644 --- a/Debian-Stretch-Root-on-ZFS.md +++ b/Debian-Stretch-Root-on-ZFS.md @@ -347,21 +347,11 @@ The compression algorithm is set to `zle` because it is the cheapest available a Choose one of the following options. If you are going to do an encrypted home directory later, you should use encrypted swap. -7.2a Create an unencrypted (regular) swap device: - **Caution**: Always use long `/dev/zvol` aliases in configuration files. Never use a short `/dev/zdX` device name. # mkswap -f /dev/zvol/rpool/swap # echo /dev/zvol/rpool/swap none swap defaults 0 0 >> /etc/fstab -7.2b Create an encrypted swap device: - - # echo cryptswap1 /dev/zvol/rpool/swap /dev/urandom \ - swap,cipher=aes-xts-plain64:sha256,size=256 >> /etc/crypttab - # systemctl daemon-reload - # systemctl start systemd-cryptsetup@cryptswap1.service - # echo /dev/mapper/cryptswap1 none swap defaults 0 0 >> /etc/fstab - 7.3 Enable the swap device: # swapon -av