Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're working on a project in which the customer needs the Ubuntu server on which a web app and database are running to be "encrypted at rest". What's the best way to implement this?

share|improve this question
That's highly situational. It seems to me like you're asking about an PCI compliance web-app. The easiest way I've seen this done is mule-ing out the payment details to a payment gateway. Then just handle user identity on the web-app – RobotHumans Apr 18 '12 at 23:09
We have no payments system in the app. It's the application data itself that must be encrypted. – dan Apr 19 '12 at 1:35
up vote 1 down vote accepted

Sorry but I cant understand what you mean with "encrypted at rest"

if you want to encrypt parts of the system i would recomend lukscrypt and lvm.

you will need to have installed LVM when you install the server I would just but the database and the files which you need to keep encrypted on a logical volume in LVM and require manual opening the encrypted partition after each reboot

share|improve this answer
Thanks, that seems like a relevant answer. – dan Apr 19 '12 at 1:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.