On Nov 28, 2011, at 8:48 AM, J. Bakshi wrote:
On Mon, 28 Nov 2011 13:15:59 +0000 (UTC)
Virgo Pärna <virgo.pa...@mail.ee> wrote:
On Mon, 28 Nov 2011 00:59:34 -0500, Rick Thomas
<rbtho...@pobox.com> wrote:
Unless you are concerned about growing swap at some later date, you
should leave swap out of the LVM and encrypt it separately -- with a
*random* key.
I think, that this would not work, if one wants to use
hibernation. And
that could be case on laptop.
Good point.... I am already using both suspend and hibernation and
expect the
same after disk FDE. Thanks for pointing ....
Yes... That's something I hadn't thought about. I've only used it for
an "always-on" server.
Another point about using a separate swap vs including swap on the
encrypted LVM: On a server, the LVM will almost certainly be on a
RAID. There's no point in putting swap on RAID.
Rick
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1036be0b-9635-4cf7-a147-e4e391c8b...@pobox.com
