So, I'm going to do a bunch of reformatting etc on my laptop over the next 2 or 3 days to get it wiped and fde'd before I go to defcon, and getting it provisioned with all the ctf tooling I need. Any recs beyond just LUKS on the root partition? Should I do LUKS over swap too?
-
The right approach is to use ephemeral encryption for swap (assuming you don't care about hibernation). There should be a way to set up a dm-crypt mapping with a random key and automatically mkswap it on boot, on your distro (Gentoo has this). No need for LUKS.
IIRC I have the same setup on my Arch box, I can double check the config if you use that.
-
-
Yeah I would be using arch. Tbh I'm not worried that much about swap since I don't plan to have my laptop powered on between locations since sleep mode is wonky, though, so I might just, like, skip it?
-
it's what i usually do if you don't think you'll be running firefox AND thunderbird at the same time, you probably won't risk filling up your whole ram and should be fine with no swap at all i guess ¯\_(ツ)_/¯
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.