Subj : Re: LUKS practice and a ?
To   : Greenlfc
From : paulie420
Date : Wed Sep 14 2022 16:43:09

 Gr> As always, it depends on your threat model and paranoia level, but most
 Gr> Linux flavors do just fine with full disk encryption using LUKS.  I'm
 Gr> *not* an expert; I usually just use the guided setup unless something
 Gr> goes horribly awry.

Same here; except I've had systems with the /boot part encrypted too. However I'd a primadonna and I like using Plymouth to make the encryption unlock l00k all pretty - when /boot is encrypted, you have to unlock before GRUB so no pretty sauce. I feel like having the main / and /home partitions LUKS'd is protection enough...

 Gr> Check out the BusKill; I've been wanting to make my own knockoff for a
 Gr> while and just haven't gotten around to it.  It'll work with any *nix,
 Gr> but the Qubes guide is here: https://www.buskill.in/qubes-os

Oh neat, thanks for sharing that. As stated I was just using a script w/ poweroff - but will l00k into this option. I don't neeed INSANE protection, but I would like to know I have SOME security so I don't pull a Dread Pirate mistake.



|07p|15AULIE|1142|07o
|08.........

--- Mystic BBS v1.12 A48 2022/07/15 (Linux/64)
 * Origin: 2o fOr beeRS bbS >> 20ForBeers.com:1337 (700:100/71)

.