Verifying that disk is encrypted
- Login o registrati per inviare commenti
Is it possible to check that the hard drive is encrypted? I don't think any indication that it is encrypted showing up in the Disks app. Maybe it isn't encrypted. Is it possible to encrypt your hard drive in an existing Trisquel installation?
I am a translator!
Here is what the lsblk command shows on my computer:
$ lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS
nvme0n1 259:3 0 931,5G 0 disk
├─nvme0n1p1 259:4 0 1M 0 part
├─nvme0n1p2 259:5 0 513M 0 part /boot/efi
├─nvme0n1p3 259:6 0 1,7G 0 part /boot
└─nvme0n1p4 259:7 0 929,3G 0 part
└─nvme0n1p4_crypt 252:0 0 929,3G 0 crypt
├─vgtrisquel-root 252:1 0 73,3G 0 lvm /gnu/store
│ /
├─vgtrisquel-swap_1 252:2 0 32,9G 0 lvm [SWAP]
└─vgtrisquel-home 252:3 0 823,2G 0 lvm /homeWhat matters is that, in the TYPE column, there is "crypt" on the volume that includes root and home.
If your drive has no encryption, I think the only solution is to backup your data, save your list of installed packages, and make a new Trisquel installation on which you reinstall packages and copy your data.
It appears my disk is not encrypted, as I suspected. I do have an encrypted external drive. Is it safe to use my Trisquel password as the encryption key for the external drive? Or would a third party be able to find that password on Trisquel if it is not encrypted itself?
I am a translator!
I am afraid I cannot answer that question. If you really care that, if your disk would be stolen, no one could access your data on it, I would recommend a different password, and with a sufficient amount of randomness.
For my disk password, I use a random list of words that I generated with keepassxc. By default keepassxc selects words from eff_large.wordlist but you can use another list. Personally, I find it better to have a list that avoids playing with plural or verbal forms, words hard to distinguish, or things that aren't real words, as it makes it more difficult to remember them. Also, my wordlist is from my main language, which is not English.