On 15/02/2025 at 22:17, Zim wrote:

When setting up partitions, if i encrypt the /tmp partition using the random 
key method instead of passphrase, the result would be an encrypted /swap 
partition instead.

In short,
/tmp + encryption random key turns into encrypted random key /swap.

To reproduce:
1. Go to the partition disks menu of debian-installer
2. Select Manual
3. Create a new partition with an ext4 journaling file system and set the mount 
point to /tmp
4.Now encrypt the /tmp partition with the encryption key set to Random Key
5. Go back to the Partition Disks section, now you will see the /tmp ext4 
partition has changed to /swap

Doing this did not encrypt the ext4 filesystem but replaced it with encrypted data for an encrypted volume, and the default is to use the resulting volume as swap area. Instead, you must create an encrypted volume and use it as /tmp:

1. Create a new partition and use it as physical volume for encryption with random key. 2. Go to "Configure encrypted volumes", "Create encrypted volumes" and select the partition. 3. Use the resulting encrypted volume (<partition>_crypt) as ext2 filesystem (ext4 is not supported in encrypted volumes with random key, patch pending) and select mountpoint /tmp.

Reply via email to