If I encrypt (dm crypt, LUKS) my whole system, how many RAM should I provide ?

I've understood that LUKS volume is mounted RAM, ... If my system is 10 Gb, should I have something like RAM 12 Go ?

  • 2
    LUKS is an encryption layer. It usually sits on top of a physical disk, so the amount of memory (RAM) in your system is largely irrelevant. (Unless you're on an embedded system, I suppose, where memory is often very tight.) – roaima Jun 17 '15 at 9:41

You have misunderstood. The LUKS data is stored on disc and encrypted/decrypted a block at a time as necessary (of course there is some caching going on).

I don't know the minimum size, but I operated a 32Gb LUKS encrypted ReiserFS partition from a 1 GB memory PC. A whole disc shouldn't make any difference from using LUKS on a partition.

  • Oh, thank you. I was asking based on this schema, blog.theglu.org/public/.schema_m.jpg (french language). Ok. Thanks. Do you confirm the system run as not encrypted, unless some added slowness ? If I add files - downloads as a client - , serve files, serve local web, etc... – ArchiT3K Jun 17 '15 at 9:18
  • I used this for my homedirectory (email, files, download etc). Yes of course there is overhead, but with a multicore system this is IMO acceptable. As far as my French goes that description doesn't say you would need more memory than encrypted disc either. – Anthon Jun 17 '15 at 9:58
  • Thanks. I 'll go this way. I'll encrypt a new install of Mint. Then I'll configure it. And finally I'll clone it to my virgin machines. – ArchiT3K Jun 17 '15 at 13:27
  • FYI @ArchiT3K Depending on how you clone your disk, you may end up copying the same LUKS master encryption key to every virgin machine's disk, so even if you add or delete passphrases, any user on any machine could decrypt any other machine's drive. Doing a fresh luksFormat on each new drive, then copying over the decrypted data would avoid that. – Xen2050 Jun 21 '15 at 8:26
  • @Xen2050 : thanks. Very clear to me. – ArchiT3K Jun 22 '15 at 7:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.