Conversation:

Notices

1. MMN-o ✅⃠ (mmn)'s status on Friday, 19-Feb-2016 05:46:41 EST MMN-o ✅⃠

   Remote profile options...

   • Anna Grímsdóttir
   @grimsdottir swap can potentially contain cryptographic secrets. /tmp is more that it might leak your system data in general. Fortunately both are easy to setup and don't need further interaction upon boot etc. To setup the swap you just need an entry in /etc/crypttab + /etc/fstab and cryptsetup will do things automagically for you in 99% of distros. /etc/crypttab: csw…
   • MMN-o ✅⃠ (mmn)'s status on Friday, 19-Feb-2016 05:48:26 EST MMN-o ✅⃠

     Remote profile options...

     • Anna Grímsdóttir
     @grimsdottir if /tmp is mounted as an in-memory or under the / filesystem you don't have to do anything. Only if you've set it up as a separate partition for some reason.
   • MMN-o ✅⃠ (mmn)'s status on Friday, 19-Feb-2016 05:50:59 EST MMN-o ✅⃠

     Remote profile options...

     • Anna Grímsdóttir
     @grimsdottir You can set encryption configuration in /etc/crypttab btw, the "swap" parameter can be extended with comma-separated options, for example: cipher=blowfish-cbc-essiv:sha256,size=256,swap
   • MMN-o ✅⃠ (mmn)'s status on Friday, 19-Feb-2016 06:18:25 EST MMN-o ✅⃠

     Remote profile options...

     • Anna Grímsdóttir
     @grimsdottir Yeah, but if you're going for an encrypted filesystem, you _certainly_ don't want to store an unencrypted memory dump anyway. :D
     
     I've never toyed with waking up from hibernation using a crypto passphrase. I just hust the computer down properly every time I want to give it some rest. Modern computers don't take very long to boot up anyway.