Would love to see HOME folder encryption option in a future release similar to how Linux Mint.
Thx
Well, i'm trialling 17.1 and it's still not in the installer. That's a bit baffling. You can encrypt the whole drive via the installer, but that requires LVM which adds a layer of complication to troubleshooting.
I'm not sure why they elected not to include it, i think it's the first "mainstream" distro i've looked at that doesn't offer it during the installation.
Any plans, Zorin?
Revisiting this. I'm trying out ZorinOS for a device that has a bluetooth keyboard. And yep - full disk encryption means that the password is required before any bluetooth drivers are loaded. So that ain't gonna work.
So - how do we set up encryption for /home?
Is this a good guide? https://ubuntushell.com/encrypt-home-folder-in-ubuntu/
God i wish the installer gave that option.
EDIT - the guide worked. Easy enough. Thanks d-man, you're the best!
I've said this before, using encryption can lead to irrecoverable data loss. Having read that warning when I was installing SuSE Linux 9.3 Professional means I stay well clear of any form of encryption. Encryption usually relies on keys that take note of the OS signature at point of install. If the system goes south, reinstalling the system changes that data and makes encryption redundant. If you have confidential files, store them on an external device and disconnect from your network before accessing them.
Encryption is absolutely essential for protection of data due to theft of a device. ALL my data is encrypted - except on Windows because BitLocker is confusing to me. I don't even log into email on Windows. Steam is the only thing i log into on Windows.
I also have backups, which of course, are encrypted (or stored on an encrypted device).
Yes, an encrypted device makes troubleshooting some issues a little (not a lot) more difficult, but that's all.
I don't understand this. I can, for example, encrypt a USB device that has no OS - and it can be unlocked and read on any OS that can read the file-system, like a live Linux CD for example. I can access my old encrypted SSD that had Arch on it from Zorin by running a couple of commands. Unless i'm misunderstanding your comment, i can't think of an "OS signature" that ties an encrypted system to it's initial installation/setup. Note i'm referring to LUKS - i have very limited experience with ecryptfs.
As far as I know, Gnome will offer an Encryption for home in a future Release. It is part of the Donation of the Sovereign Tech Fund (there has our german Government create one good Thing and almost no one knows it, hahaha!).
1 Like
Watch "The Billion Dollar Code" on Netflix - it shows how a couple of Germans basically created Google Earth before it was Google Earth. You can guess what happened...
Anyway, it was funded by German Telecom, which i presume was gov't owned back in the 90s. Like almost everything since, it's probably been sold off for this short-sighted neo-classical economic model that contributed so much to our current disastrous political, geopolitical, social and economic situation we're in.