How can i encrypt the full system/storage ? Topic is solved

Have some feedback, questions, suggestions, or just fancy a chat? Pop it in here.
Post Reply
mk33
Posts: 22
Joined: Thu Jun 11, 2020 10:13 pm

How can i encrypt the full system/storage ?

Post by mk33 »

I've recently moved to a shared apartment and I have to place my RPI in the living room, near the router. So if any roommate wanted, he could just walk away with my RPI or remove the SD-card.
**How can I encrypt my DietPi so that if any person steals my SD-card can't see nothing?**
User avatar
Joulinar
Posts: 5610
Joined: Sat Nov 16, 2019 12:49 am

Re: How can i encrypt the full system/storage ?

Post by Joulinar »

Hi,

many thanks for your request. Basically it's not possible to encrypt your entire SD card. As well DietPi is not supporting any file system encryption by default as of now. Maybe you like to have a look to the following link

https://www.raspberrypi.org/forums/view ... p?t=181181

It might be possible to create an encrypted new partition or attach an encrypted USB stick where you go to transfer your data on. But it will have as well some downsides. Some DietPi services like Nextcloud or databases storing their data on dietpi user-data directly. Means, after a reboot services will fail until the partition was encrypted and mounted.
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
mk33
Posts: 22
Joined: Thu Jun 11, 2020 10:13 pm

Re: How can i encrypt the full system/storage ?

Post by mk33 »

User avatar
Joulinar
Posts: 5610
Joined: Sat Nov 16, 2019 12:49 am

Re: How can i encrypt the full system/storage ?

Post by Joulinar »

I guess that would be interesting for you ;)

https://github.com/MichaIng/DietPi/issues/3377

There we basically played with it already.
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
zzr
Posts: 4
Joined: Tue Aug 10, 2021 3:52 am

Re: How can i encrypt the full system/storage ?

Post by zzr »

Is DietPi planning to support LUKS without manual hackarounds? It's pretty much standard these days, no matter if desktop / notebook / server.

And even if the Pi doesn't have full hardware acceleration, it's still fast enough (~100 MB/sec).
User avatar
Joulinar
Posts: 5610
Joined: Sat Nov 16, 2019 12:49 am

Re: How can i encrypt the full system/storage ?

Post by Joulinar »

It's on the list but no time line behind. Fell free to follow the GitHub link shared above.
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
User avatar
WarHawk
Posts: 772
Joined: Thu Jul 20, 2017 8:55 am

Re: How can i encrypt the full system/storage ?

Post by WarHawk »

Googled a bit

TransparentEncryptionForHomeFolder
https://wiki.debian.org/TransparentEncr ... HomeFolder

Which led to here
https://nuetzlich.net/gocryptfs/
https://github.com/rfjakob/gocryptfs
It's for files, but not for the entire drive, as I understand it...a fully encrypted drive will need a password at boot to unlock
User avatar
Joulinar
Posts: 5610
Joined: Sat Nov 16, 2019 12:49 am

Re: How can i encrypt the full system/storage ?

Post by Joulinar »

I played with full disk encryption on 32bit as well as 64bit

You can read thru the journey starting this GitHub post https://github.com/MichaIng/DietPi/issu ... -895674210
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
Post Reply