Differences

This shows you the differences between two versions of the page.

--- lehrkraefte:blc:plg:encryptedhome [2023/02/08 16:17] – Ivo Blöchliger
+++ lehrkraefte:blc:plg:encryptedhome [2023/06/30 07:09] (current) – Ivo Blöchliger
@@ Line 1: / Line 1: @@
+====== Verschlüsseltes Home ======
+Ausgangslage: Systempartition, plus leere Partition, die das verschlüsselte Home aufnehmen kann.
+<code bash>
+apt install libpam-mount
+cryptsetup -y -v luksFormat /dev/xvdc
+cryptsetup luksOpen /dev/xvdc myhome
+mkfs.ext4 /dev/mapper/myhome
+mount /dev/mapper/myhome /mnt
+# Copy already existing user data
+cp -varu /home/user/. /mnt/.
+# May be erase existing home
+umount /mnt
+cryptsetup luksClose myhome
+</code>
+In /etc/security/pam_mount.conf.xml
+<code txt>
+        <volume user="user" fstype="crypt" path="/dev/nvme0n1p7" mountpoint="/home/user" />
+</code>