Support installation with encrypted root file system
One thing openSUSE is really missing, compared with other popular distributions, is the ability to install into an encrypted root file system so _everything_ is encrypted.
While the manual installation / setup like described at http://en.opensuse.org/Encrypted_Root_File_System_with_SUSE_HOWTO works, it is still cumbersome and error-prone to setup - especially on systems with small hard disks like e.g. laptops.
IMHO this subject gets more and more important not only for laptops but also for normal workstations with respect to the global decline of privacy protection.
Since all the necessary software is in place and Yast already has the option (including the GUI) to encrypt /home this shouldn't be that hard to do and would be a great feature for 11.1 (especially if you keep in mind that this will be the base for the next SLE version and corporations love security functionality provided out of the box as an option).
Important points are:
- it should work with LVMs as well
- it should be possible to automatically generate a key on startup to encrypt the swap partition (given, this would disable suspend)
- one should be able to use the same password for several partitions so one has to enter it just one time instead of once for every partition.
- Bug #397411 - Hibernation won't work with encrypted swap
- Bug #399298 - encrypt swap partions by default on every boot using a random key
- Bug #166067 - sysinfo:/ does not list encrypted /home partition
- Bug #467349 - Partitioner does not allow to configure LVM2 on top of DM-Crypt
Set user benefit
- Related feature #304470: Easy to use Full Disk Encryption
- #415479: Support installation with encrypted root file system
- #467349: Partitioner does not allow to configure LVM2 on top of DM-Crypt
You can add different relations here, for example duplicate features, obs projects, urls...
To embedd an image you can simply upload it to paste.opensuse.org and add a relation to its raw url.
Set release notes
Last change: 22 months ago