23 ms·
Or just encrypt the whole LVM and create partitions on top of that.
by spindritf 15y ago
Or just encrypt the whole LVM and create partitions on top of that.
- wladimir 15y agoRight, that's also possible, but I like the new key every boot as it gives forward security. Even if the key for the whole image is cracked (which is easier to bruteforce than a completely random key as it is usually human-memorizable), it will not be possible to access the swapfile/temp contents.