I have an existing install of openSUSE (11.0) that I have setup on my desktop. I’m fairly concerned about the security of files on my system. Normally I would be happy with a secure deletion method (shred, Eraser) but it seems this method does not work so well with a journaling file system. So at this point I would like to encrypt my file systems. Currently my hdd layout is the following:
Primary Partition: /windows 40GB not to be encrypted... Extended Partition: /boot 133 MB not to be encrypted... swap 2GB to be encrypted... / 30GB to be encrypted... /home 160GB to be encrypted... *all partitions to be encrypted have less than 20GB used space
I have read through Encrypted Root File System - openSUSE but this seems targeted towards a new install…
I think I have a general idea on how I could proceed, but I would like to get some tips and pointers before I start. I was thinking something along the lines of:
- Backup up all data on partitions to be encrypted. (dump to external USB dive)
- Follow the steps in Encrypted Root File System - openSUSE
- Restore backed up data to encrypted file systems (restore from external USB drive)
After some discussion here on the forums and in IRC I will likely proceed in this endeavor. I am likely to fully document my experience and if I do I will post my results.
Any tips, pointers, or stories would be appreciated!