Encrypted swap?
- Inicie sesión ou rexístrese para enviar comentarios
Recently I had a problem with my home server. I found out because of this that there was no swap active on the system. I had a swap partition, but it wasn't mounted on boot. After much searching I found that the problem was that my swap partition couldn't be mounted because it contained an encrypted swap partition. This partition is called cryptswap1. I can't remember haven't ever made such a partition. Furthermore, it can't be mounted through fstab. I had to edit the local.rc file to be able to mount it.
More troublesome was the fact that I couldn't remove it. I tried everything I could think of to get rid of it. At first, I wiped the partition were it recided and recreated it. Upon boot up, cryptswap1 was back. So I deleted the partitions again (since the swap was in a logical) and made the rest of the hard drive primary. I proceeded by wiping that part of the hard drive using dd. Once I created the partitions again, cryptswap1 came back! I tried using dmsetup to clear it. It seemed to work, as dmsetup would no longer show it. Once I rebooted the machine, it came back! I then installed the package lvm2 to try and use lvm tools, but the tools were unable to find any volumes! I searched on the Internet and it seems like it has something to do with choosing the option to encrypt the home directory. However, there's no cryptswap1 on my laptop and I accepted that option on this machine as well.
So, does anyone know why this is on my system? For the ones that chose to encrypt their home directories, is there a similar device under /dev/mapper for you?
I don't know if anyone cares, but this gets created during installation. I don't know if picking the option to make the home directory private makes a difference.
To create it one has to run the following command: "ecryptfs-setup-swap"
To get rid of it one has to use this command: "cryptsetup remove /dev/mapper/cryptswap1"
I do wonder, however, where the key is stored. It can't be very secure, as it requires no password so I figure one could easily find the key.
- Inicie sesión ou rexístrese para enviar comentarios