Am Sonntag, 30. März 2008 schrieb Florian Philipp: > On Sun, 2008-03-30 at 09:50 +0200, Dirk Heinrichs wrote: > > Am Samstag, 29. März 2008 schrieb Florian Philipp: > > > My goal is to open a Luks-mapping for /var with a gpg-encrypted file > > > on /boot and then open a mapping for /var/tmp with a plaintext file > > > on /var. > > > > See below. But while we're at it, can anybody tell me what's the > > advantage of a gpg-encrypted keyfile over a keyfile generated from > > /dev/urandom? > > Keys for urandom work great for /tmp and swap but how should I use this > for a partition which is supposed to keep its content between reboots?
See my example below. > > Which warning, btw.? Works just fine here. > > "# Note when using gpg keys and /usr on a separate partition, you will > # have to copy /usr/bin/gpg to /bin/gpg so that it will work properly > # and ensure that gpg has been compiled statically. > # See http://bugs.gentoo.org/90482 for more information." Ah, I see. Since I don't use gpg it doesn't matter to me. > > target='c-usr' > > source='/dev/evms/usr' > > key='/etc/crypt/keyfile' Bye... Dirk
signature.asc
Description: This is a digitally signed message part.
