[dm-crypt] Encrypt all partitions with dm-crypt
stayvoid at gmail.com
Wed Sep 26 10:23:15 CEST 2012
> You need to add "encrypt" to
> the HOOKS setting in /etc/mkinitcpio.conf and run (as root)
> # mkinitcpio -p linux-libre
> This will add cryptsetup and the necessary modules to your initramfs.
> You also MUST add root=/dev/mapper/ROOT cryptdevice=/dev/sdX#:ROOT to your
> kernel command line (/boot/grub/menu.lst for grub-legacy,
> for grub2). Where ROOT is whatever label you want and /dev/sdX# is your
> encrypted block device. Furthermore, you need to set crypto= to your
> settings, but I don't remember the format off the top of my head.
I'd like to try mounting from a recovery shell.
But there is no /media. Is it possible to add it?
BTW, how to safely enable swap?
Should I chroot into the system and decrypt / swapon there?
> Are you *sure* you don't want to use LUKS?
More information about the dm-crypt