1

Right now, I'm running Karmic with an unencrypted home folder sharing a partition with my system files. I'd like to change all that, but I have no idea where to start. Should I move my home folder to its own partition first, to easily perform a clean install? Should I back up my data, repartition my disk, then perform a fresh encrypted install? I'm stumped.

In what order should I transfer my home folder to its own partition, encrypt my data, and migrate to Ubuntu 10.04 to minimize my downtime and protect my data?

2

From an information security perspective, the safest course of action is:

  • Create an encrypted filesystem on a backup disk.
  • Back up your home folder to that encrypted filesystem.
  • Wipe the original disk with random data.
  • Perform a fresh, encrypted install.
  • Restore files from encrypted backup onto new encrypted filesystem.

All the while remembering that the weakest point in any crypto system is the human element. Choose a good passphrase, and use a different passphrase for each encrypted filesystem (this is not like "use a different password for each website", this is a serious infosec matter, identical keys on independent but related data sets is a serious cryptographic no-no and risks very real cryptanalytic attacks).

2
  • Thanks for the answer. However, I think your solution is probably overkill for my situation. I'm going to college, and I don't want someone stealing my computer and my identity. I also want to place my home folder on a separate partition to make it easy to install each new version of Ubuntu from scratch. I just don't have the time for ironclad security right now. Aug 7 '10 at 2:38
  • @Evan: There's really no other secure course of action. You could skip encrypting the backup drive, but surely you'd want to keep backing up while you're at college anyway? Consumer HDDs have a failure rate in the area of 10%/year, someday yours will die. If you're not backing up, you'll lose data. If you're backing up to an unencrypted drive, that drive is at least as vulnerable to theft as the rest of your computer. Aug 7 '10 at 3:46
0

1) transfer you home folder to its home partition, 2) fresh install and in manual partitioning set your data to /home, 3) in the installer set your username to match your /home/username select encryption

My only concern is that the installer may have trouble encrypting an existing account's data, even possibly damage it. That's a slim chance, but if you go down that path make sure to backup your data to an external source just in case.

The other option, and one I've tried, is to backup your data, fresh install, and in the partitioner create /home and select encryption. After installation transfer your data into /home.

1
  • You can encrypt a user's home folder when you create a new account, either through the installer or later through System > Administration > Users and Groups. Oct 28 '10 at 5:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.