Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I'd like to build a Debian Live system based on sid with an encrypted root filesystem. It's quite easy to install a Debian system with a rootfs encrypted with dm-crypt/LUKS, so I suppose it's also doable on a live system.

In Debian Live 2.x, lh_config used to support an --encryption parameter which would do just that, but it's been removed in version 3.x, presumably because loop-aes has more-or-less been dropped from more recent version of Debian.

I'm looking to do this because I'm booting the live system from PXE (with the help the fetch boot parameter) and would like to make sure it's used only by IT staff, as it contains sensitive information.

As an alternative, I've looked into using an encrypted persistence image, which seems to be better supported in Debian Live, but couldn't figure out how I could load it remotely instead of being looked for on local media.

share|improve this question

1 Answer 1

up vote 0 down vote accepted

I've sent a patch for version 4.x to the Debian Live developpers as a starting point to implement this.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.