Re: [gentoo-user] Re: Full disk encryption

2011-12-03 Thread Neil Bothwick
On Sat, 3 Dec 2011 00:44:18 +, David W Noon wrote: > The reason for that working is that the fsck command loads fsck.ext2, > not e2fsck. That used to be a symlink to e2fsck, but these days it is > a separate copy (byte-for-byte identical). Doh! -- Neil Bothwick Does fuzzy logic tickle?

Re: [gentoo-user] Re: Full disk encryption

2011-12-02 Thread David W Noon
On Fri, 2 Dec 2011 23:24:29 +, Neil Bothwick wrote about Re: [gentoo-user] Re: Full disk encryption: [snip] > Busybox does have an fsck, it doesn't recognise the filesystem type, > you have to give it as an argument. A quick Google suggest that it > does indeed pass the wor

Re: [gentoo-user] Re: Full disk encryption

2011-12-02 Thread Neil Bothwick
On Fri, 2 Dec 2011 22:00:18 +, David W Noon wrote: > > Now it makes sense, but can't you use busybox fsck? > > AFAIAA, busybox does not have an fsck command. If it did, it would > only be a transparent loader for filesystem-specific programs, such as > e2fsck or reiserfsck; this is how the

Re: [gentoo-user] Re: Full disk encryption

2011-12-02 Thread David W Noon
On Thu, 1 Dec 2011 14:03:18 +, Neil Bothwick wrote about Re: [gentoo-user] Re: Full disk encryption: > On Thu, 1 Dec 2011 13:43:01 +, David W Noon wrote: [snip] > > I need to fsck / before I mount /usr, /var and everything else. > > Now it makes sense, but can't

Re: [gentoo-user] Re: Full disk encryption

2011-12-02 Thread Michael Mol
On Fri, Dec 2, 2011 at 1:58 PM, David W Noon wrote: > On Fri, 2 Dec 2011 08:55:35 +0700, Pandu Poluan wrote about Re: > [gentoo-user] Re: Full disk encryption: > >> On Dec 1, 2011 3:32 AM, "David W Noon" wrote: >> > I have a working initramfs layout, but curr

Re: [gentoo-user] Re: Full disk encryption

2011-12-02 Thread David W Noon
On Fri, 2 Dec 2011 08:55:35 +0700, Pandu Poluan wrote about Re: [gentoo-user] Re: Full disk encryption: > On Dec 1, 2011 3:32 AM, "David W Noon" wrote: > > I have a working initramfs layout, but currently it is too large > > (>32MiB) for my /boot partition. The

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread Pandu Poluan
On Dec 1, 2011 3:32 AM, "David W Noon" wrote: > - >8 snip > > I have a working initramfs layout, but currently it is too large > (>32MiB) for my /boot partition. The problem package is e2fsprogs, as > it requires dynamic linkage and, consequently, a full-sized glibc. > This sucks, so I need

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread David W Noon
On Thu, 1 Dec 2011 11:41:50 -0500, Michael Mol wrote about Re: [gentoo-user] Re: Full disk encryption: > On Wed, Nov 30, 2011 at 8:23 PM, David W Noon > wrote: > > On Wed, 30 Nov 2011 19:39:11 -0500, Michael Mol wrote about "Re: > > [gentoo-user] Re: Full disk enc

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread Michael Mol
On Wed, Nov 30, 2011 at 8:23 PM, David W Noon wrote: > On Wed, 30 Nov 2011 19:39:11 -0500, Michael Mol wrote about "Re: > [gentoo-user] Re: Full disk encryption": > > [snip] >>Stupid question...Would using LZMA and a tarball reduce the size of >>your initeamfs? &

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread Neil Bothwick
On Thu, 01 Dec 2011 08:13:24 -0600, Dale wrote: > >> I need to fsck / before I mount /usr, /var and everything else. > > Now it makes sense, but can't you use busybox fsck? > > > > > > I thought the file system was mounted ro, then the file system checks > done, then remounted rw and boot co

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread Dale
Neil Bothwick wrote: On Thu, 1 Dec 2011 13:43:01 +, David W Noon wrote: I understand that, but not why you need to run e2fsck before the switch_root. Is this to do with the way your system is set up? The object of the initramfs is only to get the system into a state where / can be mounted a

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread Neil Bothwick
On Thu, 1 Dec 2011 13:43:01 +, David W Noon wrote: > >I understand that, but not why you need to run e2fsck before the > >switch_root. Is this to do with the way your system is set up? The > >object of the initramfs is only to get the system into a state where / > >can be mounted and switch_ro

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread David W Noon
On Thu, 1 Dec 2011 08:47:27 +, Neil Bothwick wrote about "Re: [gentoo-user] Re: Full disk encryption": >On Thu, 1 Dec 2011 00:27:06 +, David W Noon wrote: [snip] >> Unfortunately, the system does not work that way. When running >> inside an initramfs, one canno

Re: [gentoo-user] Re: Full disk encryption

2011-12-01 Thread Neil Bothwick
On Thu, 1 Dec 2011 00:27:06 +, David W Noon wrote: > > Why not mount root read-only, just like in a non-initramfs system? > > > > Any e2fsck commands will be run during the boot runlevel, before > > remounting root rw. > > Unfortunately, the system does not work that way. When running ins

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread David W Noon
On Wed, 30 Nov 2011 19:39:11 -0500, Michael Mol wrote about "Re: [gentoo-user] Re: Full disk encryption": [snip] >Stupid question...Would using LZMA and a tarball reduce the size of >your initeamfs? Not really. I am already using gzip -9, and binaries don't compress espec

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Michael Mol
Stupid question...Would using LZMA and a tarball reduce the size of your initeamfs? ZZ On Nov 30, 2011 7:30 PM, "David W Noon" wrote: > On Wed, 30 Nov 2011 23:26:56 +, Neil Bothwick wrote about Re: > [gentoo-user] Re: Full disk encryption: > > > On Wed, 30 Nov 201

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Dale
David W Noon wrote: This might be one of Dale's problems, if he was trying to use commands from the root filesystem within the initramfs. I don't think that was the issue. I had nano, busybox and that was it. Basically, I just wanted it to be able to load enough that it could boot even if

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread David W Noon
On Wed, 30 Nov 2011 23:26:56 +, Neil Bothwick wrote about Re: [gentoo-user] Re: Full disk encryption: > On Wed, 30 Nov 2011 22:07:35 +, David W Noon wrote: > > > > Why do you need e2fsprogs on an initramfs? > > > > One needs e2fsck to do a "preen

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Neil Bothwick
On Wed, 30 Nov 2011 22:07:35 +, David W Noon wrote: > > Why do you need e2fsprogs on an initramfs? > > One needs e2fsck to do a "preen" prior to mounting the required > volume(s). Why not mount root read-only, just like in a non-initramfs system? Any e2fsck commands will be run during the

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread David W Noon
On Wed, 30 Nov 2011 21:47:33 +, Neil Bothwick wrote about Re: [gentoo-user] Re: Full disk encryption: > On Wed, 30 Nov 2011 20:28:28 +, David W Noon wrote: > > > I have a working initramfs layout, but currently it is too large > > (>32MiB) for my /boot partition. T

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Neil Bothwick
On Wed, 30 Nov 2011 20:28:28 +, David W Noon wrote: > I have a working initramfs layout, but currently it is too large > (>32MiB) for my /boot partition. The problem package is e2fsprogs, as > it requires dynamic linkage and, consequently, a full-sized glibc. Why do you need e2fsprogs on a

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Neil Bothwick
On Wed, 30 Nov 2011 21:19:51 +0100, czernitko wrote: > I wonder whether it is posible to simply resize the dm-crypt encrypted > partition? Or do I have to create new, bigger partition with required > size and move the data? Enlarge the partition then use cryptsetup resize to enlarge the encrypted

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread David W Noon
On Wed, 30 Nov 2011 12:31:00 -0600, Dale wrote about Re: [gentoo-user] Re: Full disk encryption: [snip] > I tried making a init thingy and after about 20 failed reboots, I > scraped the idea. I was trying to follow the howto on the Gentoo > wiki I think. The unofficial wiki. I posted

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread czernitko
I wonder whether it is posible to simply resize the dm-crypt encrypted partition? Or do I have to create new, bigger partition with required size and move the data? Peter

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Dale
Neil Bothwick wrote: On Wed, 30 Nov 2011 12:31:00 -0600, Dale wrote: Did you use a howto for Dracut? If so, have a link you could post? I tried making a init thingy and after about 20 failed reboots, I scraped the idea. I was trying to follow the howto on the Gentoo wiki I think. That worke

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Aljosha Papsch
Am Mittwoch, den 30.11.2011, 19:32 +0100 schrieb czernitko: > Yup, establishing encrypted partition for /home was easy as a pie > using cryptsetup. I was considering using truecrypt as it offers > multiplatform support, so I could access encrypted partition even from > my dualbooted windoze, but I

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Neil Bothwick
On Wed, 30 Nov 2011 12:31:00 -0600, Dale wrote: > Did you use a howto for Dracut? If so, have a link you could post? I > tried making a init thingy and after about 20 failed reboots, I scraped > the idea. I was trying to follow the howto on the Gentoo wiki I > think. That worked for me (dr

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread czernitko
Yup, establishing encrypted partition for /home was easy as a pie using cryptsetup. I was considering using truecrypt as it offers multiplatform support, so I could access encrypted partition even from my dualbooted windoze, but I didn't want to put effort into something not as well documented (how

Re: [gentoo-user] Re: Full disk encryption

2011-11-30 Thread Dale
Jack Byer wrote: czernitko wrote: I would like to have only one partition with all home directories on it, and I would like to avoid usage of initrd as I don't use it now and I would like to keep it that way if possible. You don't need an initramfs but you might want to reconsider not using o

[gentoo-user] Re: Full disk encryption

2011-11-30 Thread Jack Byer
czernitko wrote: > I would like to have only one partition with all home directories on it, > and I would like to avoid usage of initrd as I don't use it now and I > would like to keep it that way if possible. You don't need an initramfs but you might want to reconsider not using one at some po