Conversation

Notices

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 22-Jul-2024 06:40:06 JST Ryan Castellucci :nonbinary_flag:

   Found a nice trick for swap encrypted with a random key:

   mkfs.ext2 -L swap_crypt -i 2048 /dev/sdXX 64K

   and then you can use LABEL=swap_crypt for the device and include offset=128 in the options for /etc/crypttab.

   • Embed this notice
     Alexandra Magin 🏳️‍🌈 (recursive@hachyderm.io)'s status on Monday, 22-Jul-2024 06:47:48 JST Alexandra Magin 🏳️‍🌈

     in reply to

     @ryanc I was just mentioning elsewhere how much I like to swap to a zram device

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 22-Jul-2024 06:47:48 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Alexandra Magin 🏳️‍🌈

     @recursive oh, yeah, zram is nice

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 22-Jul-2024 07:55:57 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Asharas

     @asharas yeah, you just specify the key as /dev/urandom and set the swap option.

   • Embed this notice
     Asharas (asharas@piaille.fr)'s status on Monday, 22-Jul-2024 07:56:00 JST Asharas

     in reply to

     @ryanc IIRC you can configure crypttab so it creates an encrypted partition with a new key every boot.
     Edit: Crypttab doesn't create the partition, give it one with the correct options and it'll get a new key on each boot.