Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

encrypted swap file support? #80

Open
dou4cc opened this issue Jun 22, 2019 · 7 comments
Open

encrypted swap file support? #80

dou4cc opened this issue Jun 22, 2019 · 7 comments
Milestone

Comments

@dou4cc
Copy link

dou4cc commented Jun 22, 2019

No description provided.

@nefelim4ag
Copy link
Owner

What you mean?
Linux doesn't have encrypted swap.

@peterhoeg
Copy link

I'm guessing that @dou4cc means swap on a dm-crypt volume with a random key.

@dou4cc
Copy link
Author

dou4cc commented Jul 2, 2019

@nefelim4ag whether you accept the feature request?

@nefelim4ag
Copy link
Owner

I'm don't see any sense in that, so nope.
If you really care about your data, such things is your problem.

More over, why i must support dm-crypt and not support LUKS or vise-versa?

i.e. what if i insert code, which will send key to me from every computer with dm-crypt?

You must understand the concern, you can do encrypted swap partition by yourself.

@dou4cc
Copy link
Author

dou4cc commented Jul 4, 2019

More over, why i must support dm-crypt and not support LUKS or vise-versa?

either of they be ok

i.e. what if i insert code, which will send key to me from every computer with dm-crypt?

well, even if not implement the feature, you can crack into dm-crypt

@beanaroo
Copy link

@dou4cc I'm not sure which method of encrypted swap you are after, but I just tried this project for the first time and it is working for my method without modifying the configuration or service.

In my /etc/crypttab, I put:

#<name>  <device>                              <password>     <options>
swap     /dev/disk/by-id/nvme-eui.2f5f-part2   /dev/urandom   swap,cipher=aes-cbc-essiv:sha256,size=256

I then installed systemd-swap and enabled it before rebooting.

# swapon --show
NAME      TYPE      SIZE USED PRIO
/dev/dm-5 partition 6.5G   0B   -2

@vilgotf
Copy link
Contributor

vilgotf commented Jun 5, 2020

Since we delete our swapfiles on shutdown the security seems to only matter in regards to hibernation.

@vilgotf vilgotf added this to the 5.1 milestone Aug 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants