<div dir="auto">If it's part of a general lockdown for your laptop, and you feel strongly enough to do that - don't forget the other stuff you probably want to do as well ...<div dir="auto"><br></div><div dir="auto">My team lead published this gem, it's what we use to haze new staff..</div><div dir="auto"><br></div><div dir="auto"><a href="https://github.com/lfit/itpol/blob/master/linux-workstation-security.md">https://github.com/lfit/itpol/blob/master/linux-workstation-security.md</a><br></div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto">Cheers</div><div dir="auto">/Chris</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 30 Mar 2020, 11:46 am Steve Baker, <<a href="mailto:steve@iinet.net.au" target="_blank" rel="noreferrer">steve@iinet.net.au</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Thanks Chris and Brad for the tip on LUKS, will look into it. Cheers!<br>
<br>
<br>
On 30/3/20 10:59 am, Chris Hoy Poy wrote:<br>
> Yes, use LUKS / cryptsetup during install process.<br>
><br>
> I have my own laptop set up in this manner, along with selinux, <br>
> secureboot and all the bios lockdown stuff you should have.<br>
><br>
> Works out of the box with FedoraCore + Ubuntu (though I haven't done a <br>
> run through with Ubuntu in a couple years) on recent-ish hardware.<br>
><br>
> Cheers<br>
> /Chris<br>
><br>
><br>
> On Mon, 30 Mar 2020, 10:54 am Steve Baker, <<a href="mailto:steve@iinet.net.au" rel="noreferrer noreferrer" target="_blank">steve@iinet.net.au</a> <br>
> <mailto:<a href="mailto:steve@iinet.net.au" rel="noreferrer noreferrer" target="_blank">steve@iinet.net.au</a>>> wrote:<br>
><br>
> Hi All,<br>
><br>
> I have Ubuntu Linux installed on my laptop, and I need to use some<br>
> level<br>
> of encryption on (some of) the contents of the storage.<br>
><br>
> It's a dual-boot with Windows, I don't need the Windows partition<br>
> encrypted. Currently the Linux installation uses a single<br>
> partition, I<br>
> can either encrypt that OR split off the contents of /home to a new<br>
> partition and just encrypt that.<br>
><br>
> Is it possible to just encrypt a single partition / filesystem like<br>
> this? Or is it better to encrypt the whole disk? Is encrypting the<br>
> whole<br>
> disk compatible with Linux/Windows dual-boot? What is the<br>
> recommended<br>
> method/software/tools for this?<br>
><br>
> Thanks for your help.<br>
><br>
> Regards,<br>
> Steve<br>
><br>
> _______________________________________________<br>
> PLUG discussion list: <a href="mailto:plug@plug.org.au" rel="noreferrer noreferrer" target="_blank">plug@plug.org.au</a> <mailto:<a href="mailto:plug@plug.org.au" rel="noreferrer noreferrer" target="_blank">plug@plug.org.au</a>><br>
> <a href="http://lists.plug.org.au/mailman/listinfo/plug" rel="noreferrer noreferrer noreferrer" target="_blank">http://lists.plug.org.au/mailman/listinfo/plug</a><br>
> Committee e-mail: <a href="mailto:committee@plug.org.au" rel="noreferrer noreferrer" target="_blank">committee@plug.org.au</a> <mailto:<a href="mailto:committee@plug.org.au" rel="noreferrer noreferrer" target="_blank">committee@plug.org.au</a>><br>
> PLUG Membership: <a href="http://www.plug.org.au/membership" rel="noreferrer noreferrer noreferrer" target="_blank">http://www.plug.org.au/membership</a><br>
><br>
><br>
> _______________________________________________<br>
> PLUG discussion list: <a href="mailto:plug@plug.org.au" rel="noreferrer noreferrer" target="_blank">plug@plug.org.au</a><br>
> <a href="http://lists.plug.org.au/mailman/listinfo/plug" rel="noreferrer noreferrer noreferrer" target="_blank">http://lists.plug.org.au/mailman/listinfo/plug</a><br>
> Committee e-mail: <a href="mailto:committee@plug.org.au" rel="noreferrer noreferrer" target="_blank">committee@plug.org.au</a><br>
> PLUG Membership: <a href="http://www.plug.org.au/membership" rel="noreferrer noreferrer noreferrer" target="_blank">http://www.plug.org.au/membership</a><br>
<br>
_______________________________________________<br>
PLUG discussion list: <a href="mailto:plug@plug.org.au" rel="noreferrer noreferrer" target="_blank">plug@plug.org.au</a><br>
<a href="http://lists.plug.org.au/mailman/listinfo/plug" rel="noreferrer noreferrer noreferrer" target="_blank">http://lists.plug.org.au/mailman/listinfo/plug</a><br>
Committee e-mail: <a href="mailto:committee@plug.org.au" rel="noreferrer noreferrer" target="_blank">committee@plug.org.au</a><br>
PLUG Membership: <a href="http://www.plug.org.au/membership" rel="noreferrer noreferrer noreferrer" target="_blank">http://www.plug.org.au/membership</a></blockquote></div>