[CentOS] Whole disk encryption - SOLVED

Plant, Dean dean.plant at roke.co.uk
Thu Aug 7 08:17:35 UTC 2008


Timothy Selivanow wrote:
> On Mon, 2008-08-04 at 16:51 +0100, Plant, Dean wrote:
>> Has there been any updates to support encrypting the whole disk in
>> 5.2? 
> 
> There hasn't been any built-in support until Fedora 9, so perhaps at
> the earliest it would be 5.3 if at all.  There are however, ways you
> can implement it yourself.  The biggest things you have to keep in
> mind are that you need to make a change to the mkinitrd script and
> then generate a new initrd image to be able to encrypt /, otherwise
> you could just modify init.
> 
> There are a number of websites that have some docs on how to do it,
> here is just one that I've seen in the past:
> 
> http://www.tummy.com/Community/Articles/cryptoroot-f8/
> 
> 

Thank you to everyone who replied.

Tim,

Thanks for the above link. Those instructions work fine on v5.2. You
have to manually edit /sbin/mkinitrd but the changes are obvious enough
from their patch file. Not quite whole disk encryption but a good
compromise.

Now just need to put this in a kickstart file to try and automate the
setup.

Thanks

Dean



More information about the CentOS mailing list