installer icon indicating copy to clipboard operation
installer copied to clipboard

Suggest : more flexible auto encrypted partitioning

Open antonincms opened this issue 8 years ago • 0 comments

In the installer (CLI or CLI in GUI), when we arrive to the "Partition Drive" step, the installer offers to

  • Auto Partition Drive (that I didn't test)
  • Auto partition encrypted LVM
  • and manual partitionnment.

I tried "Auto partition encrypted LVM" and I was surprised about the choice of using LUKS on LVM instead of the more common LVM on LUKS which is a bit more secure. I don't say this choice isn't interesting, yes it permits to have unencrypted partitions (as for example here lvm/tmp) but it's not that secure, gnome-disk or gparted don't recognise that form of partitionning, which is (from my point of view here) more complex to modify (because I was aiming to reduce all the physical volume and modify some volumes). For example, archlinux.org wiki describe LVM on LUKS as

The straight-forward method is to set up LVM on top of the encrypted partition instead of the other way round.[...]

I would like to have, and I think it's better for many persons, a choice between

  • Auto Partition Drive
  • Auto Partition Encrypted LVM (which should be LVM on LUKS, for me) and maybe a -Other Auto Partition Encrypted ,which could contain LUKS on LVM and why not the "Simple partition layout with LUKS" which could be simpler".

I'd like too to have the choice between have a lvm/tmp or let is as a tmpfs or in the main partition. For example, as I was searching for a "simple as possible" encrypted installation here, I would have prefered to use the "Simple partition layout with LUKS" or maybe a LvM on LUKS with the with a tmpfs for /tmp. You could just say "Meh, use the manual partitionning" but here as the installer is, I would have to reconfigure many things, as I think (didn't tried) installer consider manual partitionning as unencrypted installation.

antonincms avatar Jan 06 '18 16:01 antonincms