Subj : LUKS practice and a ?
To   : All
From : paulie420
Date : Sun Sep 11 2022 13:06:23

So I have my main data partition LUKS encrypted; I don't encrypt the boot partition because I've read some of the pros/cons and don't think I NEED to - thoughts?

I created a script that uses the 'poweroff' command and linked it to an alias that I can quickly run from the CLI... its also keybound so I can press quickly to do the same from the desktop.

I haven't done this yet, but I'm thinking about adding some sort of encrypted sub-folder within that open LUKS partition for when I'm logged in and using the device - this dir could be locked down with highly sensitive data, so that ITS locked even when the machine is on.

And my questions... 
Do you think I should have the ENTIRE drive LUKS encrypted, including the boot partition? Why?
Do you do anything different, or does anyone have any tips on my setup? I knew I wanted a quick shutdown method and chose that 'poweroff' command b/c it literally shuts power immediately; if I'm ever pulled away from the machine with some ruse I can always choose to execute that command... 

I'd love to hear what methods you incorporate to secure yer data. Cheers, guys and gals.



|07p|15AULIE|1142|07o
|08.........

--- Mystic BBS v1.12 A48 2022/07/15 (Linux/64)
 * Origin: 2o fOr beeRS bbS >> 20ForBeers.com:1337 (700:100/71)

.