-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 12/02/2019 3.40 AM, Johannes Graumann wrote: > Gentlepeople, > > After playing with it on a secondary machine, I'm looking to transition > from my Arch-setup to Qubes. > > I am traditionally choosing to encrypt my file systems using serpent > (considered the strongest entry into the AES competition with slightly > worse speed than the finally choosen Rijndael algorithm) and the > following partitioning: > - UEFI-required EFI System Partition, 512MB, EFI System > - /boot partition (to be encrypted), 512MB, Linux filesystem > - SWAP partition (to be encrypted using a random key), size of RAM > (`free -m`) + 1 MiB, Linux filesystem > - tmp partition (to be encrypted using a random key), 2GB, Linux > filesystem > > All but the UEFI partition are being encrypted. '/boot' uses a keyfile > resident in '/' (appropriate grub configuration) and thus PW-protectded > through the encryption of '/'. > > Questions: > 1) Does that make sense (for Qubes)? > 2) Am I missing something necessary? > 3) Is there documentation on custom disk encryption and if no: where in > the installation process would I break out (how) to the CLI to get it > done? > > Thanks for any hints. > > Sincerely, Joh >
This sounds like what you're looking for: https://www.qubes-os.org/doc/custom-install/ - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlxjdecACgkQ203TvDlQ MDBnOBAAljqLh5JK+O1uTHK1DEcGvgpcOMgNOm+r5MfVgUP3Qh3kAPmjidR4npYr e4Ok/4vk1lP+7W6Nst3y8hoiPXwXwFGthwnjjPp4SQBZsEtY2l3nCq+QyoNKTmjC iUtqq4IUue+Mp2WFDvzTfeZTSffMseYb5yRl9HPnB+NKnfiPf9LkBGeziETYztpt woSv6QoULh1f2aUc6PrDH/3ExJot4RB8uZ8z+DlTq56fhcvTnapk20p7yNTwwXd4 T7I961nE3lHqWMgBCAURY2HtQfqd/2NvV8aIVhD/qAIP0f+QjFFpvm9fOVdyTNC/ NR+AKJaUPMvxxea+7d+Z8k3xro7Il+Tj1gI2RGPoooHz3xAvp6mnHSVr5fGE93fk t3wkM4tS2ttPN4Un53EpDwXbqvbWvPdXqnv92zPU+e1Kz3OsZto4vkYiBtd0XErp pUAvNFqEb4e3o/1TB2FYL2feQkFp9lUMoYT0AUCDNRvyu/tKm5QcblYO5lTiKQW8 KArf7ly5F++9J7kb5q8IjPXMF+24gtGi6HYvI5/qJg5hDh87+C3mluqNJe++JdFc rZAvc5xAHZFsU55T8a2Unve2KlzDZvj8qLuxGFL8BPZTyI7fYl7rxWhL4nnmQjWP +gLH3EKXenL3sUQzbuk9j1n9pF3c9/qXJfwozv+8/HjP1Gm9uSk= =biVv -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/77b58987-23df-d378-eeea-08d38b6ed081%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
