Archive-Team
/
zfs
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 103 Wiki Activity

Debian: Drop encrypted swap 

Nowhere else in the Debian guide is encryption supported.  This makes
reference to "encrypted home directory later", which does not exist.
Richard Laager 2018-10-06 20:41:21 -05:00
parent 7233b34fa3
commit d6aeaac228
1 changed files with 0 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Debian-Stretch-Root-on-ZFS.md

@ -347,21 +347,11 @@ The compression algorithm is set to `zle` because it is the cheapest available a
Choose one of the following options. If you are going to do an encrypted home directory later, you should use encrypted swap. Choose one of the following options. If you are going to do an encrypted home directory later, you should use encrypted swap.
7.2a Create an unencrypted (regular) swap device:
**Caution**: Always use long `/dev/zvol` aliases in configuration files. Never use a short `/dev/zdX` device name. **Caution**: Always use long `/dev/zvol` aliases in configuration files. Never use a short `/dev/zdX` device name.
# mkswap -f /dev/zvol/rpool/swap # mkswap -f /dev/zvol/rpool/swap
# echo /dev/zvol/rpool/swap none swap defaults 0 0 >> /etc/fstab # echo /dev/zvol/rpool/swap none swap defaults 0 0 >> /etc/fstab
7.2b Create an encrypted swap device:
# echo cryptswap1 /dev/zvol/rpool/swap /dev/urandom \
swap,cipher=aes-xts-plain64:sha256,size=256 >> /etc/crypttab
# systemctl daemon-reload
# systemctl start systemd-cryptsetup@cryptswap1.service
# echo /dev/mapper/cryptswap1 none swap defaults 0 0 >> /etc/fstab
7.3 Enable the swap device: 7.3 Enable the swap device:
# swapon -av # swapon -av