Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.
up vote 0 down vote favorite

We're working on a project in which the customer needs the Ubuntu server on which a web app and database are running to be "encrypted at rest". What's the best way to implement this?

share|improve this question
That's highly situational. It seems to me like you're asking about an PCI compliance web-app. The easiest way I've seen this done is mule-ing out the payment details to a payment gateway. Then just handle user identity on the web-app – Call me V Apr 18 '12 at 23:09
We have no payments system in the app. It's the application data itself that must be encrypted. – dan Apr 19 '12 at 1:35

1 Answer

up vote 1 down vote accepted

Sorry but I cant understand what you mean with "encrypted at rest"

if you want to encrypt parts of the system i would recomend lukscrypt and lvm.

http://www.debuntu.org/how-to-encrypted-partitions-over-lvm-with-luks

you will need to have installed LVM when you install the server I would just but the database and the files which you need to keep encrypted on a logical volume in LVM and require manual opening the encrypted partition after each reboot

share|improve this answer
Thanks, that seems like a relevant answer. – dan Apr 19 '12 at 1:42

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.