I'm on Ubuntu 14.04 using full disk encryption (LVM on top of LUKS).
I would like to incorporate
luksSuspend into the suspend procedure (and later use
luksResume) so that I can suspend to RAM without leaving key material on memory and the root unlocked.
I've been trying for the last 7 hours to port a script for Arch Linux, so far without success: I honestly have no idea of what I'm doing...
Can anyone help be port this (or create something like this from scratch)? Or, at least, can anyone point me to documentation about how to hook stuff into the suspend procedures and how to keep the necessary binaries and scripts (such as cryptsetup) available even after all IO to root has been blocked (by
Concerning how to keep the necessary binaries and scripts available for resume, this other blog post (also for Arch) copied them to
/boot; I would like however to use something more in the lines what Vianney used in the script I mentioned before, because that approach appears to be a bit more elegant in this aspect.