[Pkg-cryptsetup-devel] Bug#475838: cryptsetup: Would like to use decrypt_derived with a source mapping other than that of the root filesystem

[Jérémy Bobbio]

On Sun, Apr 13, 2008 at 11:09:38AM +0100, Sam Morris wrote:
> Alternatively, if there is another way to set up encrypted swap so that
> I can hibernate to it, I would love to hear it. :)

The setup done by the debian-installer when using guided partitioning
with "encrypted LVM" is fully able to hibernate.

The layout is the following:
 * There is only two physical partitions on your hard drive,
   a small unencrypted one for /boot, and the rest of the disk is
   all in an encrypted partition.
 * Use this encrypted partition as an LVM physical volume.
 * Then setup a LVM volume group with at least two logical volumes: one
   for / and one for the swap.

When entering the passphrase during the boot sequence, you will be
unlocking both the root filesystem and the swap at the same time and
hibernation works fine. :)

Cheers,
-- 
Jérémy Bobbio                        .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20080414/0f5781c9/attachment.pgp