Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

My machine no longer resumes properly after hibernation. However, it used to until recently.

When trying to figure this out, I've seen lots of people say that hibernate doesn't work with encrypted home directories. But that can't be right - I've had en encrypted directory since it was default, and my machine used to resume. And doesn't everyone have an encrypted directory by default now - surely hibernate would never work then!

share|improve this question
    
Can you paste the contents of /var/log/pm-suspend.log on paste.ubuntu.com and post the URL here? –  Lekensteyn Mar 22 '11 at 9:26
add comment

2 Answers

up vote 10 down vote accepted

No, hibernate is definitely broken if you encrypt home. Actually the problem isn't encrypted home per se, it's the encrypted swap that's the problem.

Here's the bug for this issue if you want to track it or comment: https://bugs.launchpad.net/ecryptfs/+bug/432785

Alternately, you can disable encrypted swap, but as the manpage for ecrypt-setup-swap says:

Encrypted swap is essential to securing any system using eCryptfs, since decrypted file contents will exist in the system’s memory, which may be swapped to disk at any time. If the system swap space is not also encrypted, it is possible that decrypted files could be written to disk in clear text.

If you understand the risks and still feel comfortable disabling swap encryption, I found a good and very to the point HOWTO here: http://www.logilab.org/blogentry/29155

share|improve this answer
    
So is it possible to unencrypt swap? –  Paul Biggar Mar 22 '11 at 21:09
add comment

Out of the box hibernation does not work with the encrypted swap Ubuntu sets up together with encrypted home directories. Disabling swap encryption is not a good idea as the encryption keys are written to the swap in plain text when the system hibernates, and also in other cases it is possible that the keys are leaked to swap space, effectively rendering the whole concept useless. Again: Do not disable swap encryption, especially if you plan to hibernate the system.

But it is not too hard to set a static passphrase instead of the random one. This way you have to enter the swap encryption passphrase every time you boot (or resume from hibernation). Unattended boots are not possible this way, but for many scenarios this is not a problem.

I tested the following instructions on Ubuntu 12.04 and it worked very well:

Enable Hibernate With Encrypted Swap

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.