On Sun, 2016-01-10 at 06:52 -0800, Alice Wonder wrote:
For me, I only need /tmp as tmpfs on my Bitcoin box - and then only when generating private keys for cold storage, SSDs are often not very good at securely deleting files. So I use tmpfs for /tmp and generate the private keys for cold storage to a file in /tmp and then print it from there (for storage in safe deposit box) - so that the private keys can't be recovered from the SSD.
Why not, on start-up, create a 'ram disk' and do your sensitive work in volatile RAM or is this what 'tmpfs' implies ?