[dm-crypt] Encrypt all partitions with dm-crypt

Stayvoid stayvoid at gmail.com
Wed Sep 26 10:23:15 CEST 2012


> You need to add "encrypt" to
> the HOOKS setting in /etc/mkinitcpio.conf and run (as root)
>
> # mkinitcpio -p linux-libre
>
> This will add cryptsetup and the necessary modules to your initramfs.

It worked.

> You also MUST add root=/dev/mapper/ROOT cryptdevice=/dev/sdX#:ROOT to your
> kernel command line (/boot/grub/menu.lst for grub-legacy,
> /boot/grub/grub.cfg
> for grub2). Where ROOT is whatever label you want and /dev/sdX# is your
> encrypted block device. Furthermore, you need to set crypto= to your
> specific
> settings, but I don't remember the format off the top of my head.

I'd like to try mounting from a recovery shell.
But there is no /media. Is it possible to add it?

BTW, how to safely enable swap?
Should I chroot into the system and decrypt / swapon there?

> Are you *sure* you don't want to use LUKS?

Yes.


More information about the dm-crypt mailing list