[sf-lug] Full Disk Encryption options?

[Tom Haddon]

On Sun, 2008-03-23 at 13:53 -0700, Kristian Erik Hermansen wrote:
> Truecrypt on Linux doesn't seem to allow full disk encryption.  

Hope this isn't too irrelevant, but why would you want to do full disk
encryption? You're slowing down your machine by forcing it to do extra
processing and you're encrypting many many files that are publicly
available and don't have any personal information in them. I don't
really see the point of encrypting /usr/bin, /usr/sbin, /usr/lib, /lib,
etc...

Why not just encrypt the stuff that's specific to you?

Thanks, Tom

> I am
> looking for suggestions here.  I would really like to utilize a
> package that asks for a password on bootup and handles everything else
> (like Safeboot does full FDE).  Alternatively, I could settle for
> something that merely encrypts the partition.  With TrueCrypt, which I
> am currently utilizing, I can mount the encrypted file as a volume (or
> a partition).  This is OK for some things, but I was looking to hide
> everything.  I would like to be prompted for a password or key file on
> boot ideally.  I have done this on Windows, but never researched
> anything outside of Truecrypt for Linux.  Any ideas or first hand
> suggestions?  I don't think I should need to write this myself,
> because it probably exists.  Some of the docs I found online were a
> bit outdated though.  Thanks!