Full Disk Encryption - with Support for Hibernation?

Hello,

I’ve been using openSUSE for 3 years now and it’s been the most reliable distribution I’ve used so far.
I’m using openSUSE on a Dell laptop, partly for work. Disk encryption is a must to me, especially after a colleague’s laptop got stolen and he had to deal with the consequences of identity theft and stolen work (song blueprints).

I’ve had my /home partition encrypted with LUKS and so far I’m happy with it.
Recently I came across this article in the openSUSE wiki:
Encrypted Root File System - openSUSE which explains the
importance of addtional encryption of /root and /swap.
I was very happy to see that 11.0 apparently will include support of encrypted /root partitions:

However, as far as I know, none of these strategies support suspending/hibernation yet, which is an important feature to me as it makes working with a laptop much more comfortable.
Yet, I came across Fedora 9, which includes a convenient way of fully encrypting your drive and even hibernate and wake-up (using an encrypted LVM).

My Question therefore: Are there any plans to include full disk encryption into the next openSUSE? Especially with suspend/hibernate support?

Kind regards,

Peter

Hello Peter,

using the method of Encrypted Root File System - openSUSE and following the hint in Talk:Encrypted Root File System - openSUSE (under the subtitle “Another option for mounting encrypted swap partitions at boot”) makes it possible to use hibernation.

The only inconvenience is the need to enter the passphrase for every encrypted partition.

So i configured my system with a swap and a big root partition - and will have to enter 2 passphrases.

Not as comfortable like the solution with an encrypted lvm (in ubuntu e.g.) - i can live with it.

Regard, user2304

another highly regarded option is using the full-system-encryption option in truecrypt.

truecrypt does not offer full disk encryption on linux.

that’s way too complicated, sorry :wink:
Fedora and Ubuntu offer that out of the box.

openSUSE News » openSUSE to Add SELinux Basic Enablement in 11.1
see the 4th or 5th comment…

Comment by Marcus Meissner
2008-08-22 07:19:13

Full disk encryption is mostly implemented for 11.1.

But it brings interesting problems, like how to handle Laptop suspend and resume and so on.

Dunno about the current status though…

Apparently there’s hope:
https://bugzilla.novell.com/show_bug.cgi?id=432427 - encrypting root bug has been assigned

https://bugzilla.novell.com/show_bug.cgi?id=432427
now lists the bug as “Resolved” in 11.1 beta3
anyone have tried it yet?