Mike C wrote:
Deron Meranda <deron.meranda <at> gmail.com> writes:
The / and primary swap partitions (or logical volumes) are handled a
bit differently than say /opt. They are mounted very early in the boot
process, and in fact are handled by the initrd's nash scripts. If you
change the LUKS options for these, you'll need to rebuild the initrd
(see mkinitrd) as well. Or, you could just wait until the next kernel
update and it will correct things for you.
I'd use /dev/urandom for swap; unless it's a laptop and you'll
Great - I understand now - yes I remember there were certainly mkinitrd
issues in F8 which are hopefully corrected in f9.
Indeed this is a laptop - I guess I can re-run mkinitrd manually
and maybe this will work ahead of waiting for another kernel.
Hence referring to the keyfile in /root will be better than /dev/urandom
Better in what way? I think either case gets you out of typing a 2nd
LIKS password. Using /dev/urandom seems to avoid having a password where
anyone could ever recover it, and I think using LUKS on swap will kill
suspend in either case (it may work better than it did last time I tried
it).
--
Bill Davidsen <davidsen@xxxxxxx>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot
--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
