Congratulations on the success of the channel. I haven't been visiting for at least 6 months since you had your celebratory video on 5K subscribers. Again, congrats! All the best from Perth in West Australia.
Again, excellent instructions. Spent a whole day last week trying to encrypt my /home drive mounted in a secondary drive in it's own partition on a laptop. After watching your video, I can clearly see what I missed in the Arch wiki for getting it to mount during boot. Thank you! Last week I did get a lot of practice using "arch-chroot" 🙂
Nice :-) What could be a good video as a continuation: have your root encrypted (with a password prompt at boot time) and the rest of the disks are decrypted in the crypttab file through key files. So you have one master password required only once :-)
I am so proud with my first Arch Linux System. Make it with your last Arch Install Video. It runs so fine as well. But this Vid is fine too, but i do this later when i am more professional in Arch. But very interesting theme.
Thank you for the video! Could you also do an extension to this video showing how to pull a keyfile from a network drive during boot with a passphrase as a backup option?
Great Video!, as usual, you bring Arch to everyone, thanks a lot for your efforts. ZFS encryption: The first difficult I encounter is... ZFS module are updated a little bit later than kernels itself (e.g. 'zfs-dkms'), the same occur if I want create a dedicated-arch-installation-ISO. In this way/situation I niter can install ZFS nor manage attached disks (encrypted or not but) using ZFS. Question-s: 1. How to detect until which kernel version ZFS and/or "special ISO Building" is supported? 2. How to downgrade actual system to above mentioned kernel version? 3. How to install Arch pointing a special defined kernel-version? 4. How to point/Pin this kernel version to not be upgraded later on? 5. Is a method/script let update/upgrade the kernel only if "ZFS"-module and "ISO"-creation module working with new kernel-version? P.S.: I hope the solution is not LTS
Thank you for all your work. I love Arch and the way you present it to the world. I have one question: Can you encrypt an existing partition with data in it? Can you use the same method you are using? Thank you.
Any way to encrypt a secondary Drive without formatting the disk? Preserving existing content? I have two disks. 1 an ssd with linux mint installed and using disk encryption. 2 a second HDD disk as storage. This second HDD would therefore be my target, as I assume only the SSD is encrypted.
Hey Ermanno, do you know any good way to resize an encrypted partition? cause I did exactly what you did in this video, and encrypted a partition just like this, but when I tried to resize the encrypted partition, I lost all data. Is there a good way to have an encrypted partition and then be able to resize it later on? Now let's make this very clear, I do not fully understand LVM, but from what I understand it can help make resizing partitions easier and other cool things like that, but for my purpose I wonder if I could partition my whole disk using LVM and apply encryption to it, maybe that could work. But then I'm thinking, what if I needed to install windows for some reason, in that case I wouldn't be able to Install Windows in there cause Windows doesn't support LVM, would I be somehow able to take some space from the encrypted LVM and allocate that outside of it so I could install Windows on it. I hope this makes sense lol. Anyways, regardless I love your videos, you do a great job of explain this stuff, I hope you have a wonderful week :)
Hi Neo, resizing is at best done with encrypted LVM. It is always tricky anyway, and very recommended to always have a backup of your data. Also, it depends on the filesystem. With ext4 you can shrink lvm's. With XFS for example not.
@@eflinux First of all thank you very much for the reply, I appreciate it, huge fan of your content. But, when it comes to my laptop, I really don't anything way too important on here and my brother got an unlimited google drive from his university, so I have backed up a lot of my configs and other stuff like that on there, so I'll try to experiment with LVM+luks a little bit and see how it goes. Thanks for the reply again, cheers!
Encryption and ssd drives. Not an expert so i am asking: i read that encryption reduces life time of ssd drives. So how much does this process reduce life time of your ssd?
Absolute path is the path from root, relative path is path from whatever folder you’re in. For example if you’re in ~, you can just cd Downloads to get to your downloads. But that’s the relative path. The absolute path would be ~/Downloads
Aha, 3 years later, I have a similar setup and am once more guided by your wonderful tour :.)
Love to see new vids on my feed. Thanks Ermanno (brother) 😎👌👌
Glad you like them!
Exactly the video i needed for my current project. Great timing. Thanks!
Perfect!
Agree, another valuable tool in the box
Congratulations on the success of the channel. I haven't been visiting for at least 6 months since you had your celebratory video on 5K subscribers. Again, congrats! All the best from Perth in West Australia.
Thank you so much! And nice to see you again!
Yet another great video that matches my use case. Thanks Ermanno!
Glad to help!
Again, excellent instructions. Spent a whole day last week trying to encrypt my /home drive mounted in a secondary drive in it's own partition on a laptop. After watching your video, I can clearly see what I missed in the Arch wiki for getting it to mount during boot. Thank you! Last week I did get a lot of practice using "arch-chroot" 🙂
Glad it helped!
Nice :-)
What could be a good video as a continuation: have your root encrypted (with a password prompt at boot time) and the rest of the disks are decrypted in the crypttab file through key files. So you have one master password required only once :-)
Great suggestion!
Man, you saved my life! Love your content
Happy to help!
I am so proud with my first Arch Linux System. Make it with your last Arch Install Video. It runs so fine as well. But this Vid is fine too, but i do this later when i am more professional in Arch. But very interesting theme.
Nice! Great job.
Thanks!
Thank you for the video!
Could you also do an extension to this video showing how to pull a keyfile from a network drive during boot with a passphrase as a backup option?
Great suggestion!
Great Video!, as usual, you bring Arch to everyone, thanks a lot for your efforts.
ZFS encryption:
The first difficult I encounter is... ZFS module are updated a little bit later than kernels itself (e.g. 'zfs-dkms'), the same occur if I want create a dedicated-arch-installation-ISO.
In this way/situation I niter can install ZFS nor manage attached disks (encrypted or not but) using ZFS.
Question-s:
1. How to detect until which kernel version ZFS and/or "special ISO Building" is supported?
2. How to downgrade actual system to above mentioned kernel version?
3. How to install Arch pointing a special defined kernel-version?
4. How to point/Pin this kernel version to not be upgraded later on?
5. Is a method/script let update/upgrade the kernel only if "ZFS"-module and "ISO"-creation module working with new kernel-version?
P.S.: I hope the solution is not LTS
I'll have to look into zfs a little more before I can answer that.
thank you!
Thank you for all your work. I love Arch and the way you present it to the world. I have one question: Can you encrypt an existing partition with data in it? Can you use the same method you are using? Thank you.
Thx for the vid
You're welcome!
Any way to encrypt a secondary Drive without formatting the disk? Preserving existing content? I have two disks. 1 an ssd with linux mint installed and using disk encryption. 2 a second HDD disk as storage. This second HDD would therefore be my target, as I assume only the SSD is encrypted.
Hey Ermanno, do you know any good way to resize an encrypted partition? cause I did exactly what you did in this video, and encrypted a partition just like this, but when I tried to resize the encrypted partition, I lost all data. Is there a good way to have an encrypted partition and then be able to resize it later on? Now let's make this very clear, I do not fully understand LVM, but from what I understand it can help make resizing partitions easier and other cool things like that, but for my purpose I wonder if I could partition my whole disk using LVM and apply encryption to it, maybe that could work. But then I'm thinking, what if I needed to install windows for some reason, in that case I wouldn't be able to Install Windows in there cause Windows doesn't support LVM, would I be somehow able to take some space from the encrypted LVM and allocate that outside of it so I could install Windows on it. I hope this makes sense lol. Anyways, regardless I love your videos, you do a great job of explain this stuff, I hope you have a wonderful week :)
Hi Neo, resizing is at best done with encrypted LVM. It is always tricky anyway, and very recommended to always have a backup of your data. Also, it depends on the filesystem. With ext4 you can shrink lvm's. With XFS for example not.
@@eflinux First of all thank you very much for the reply, I appreciate it, huge fan of your content. But, when it comes to my laptop, I really don't anything way too important on here and my brother got an unlimited google drive from his university, so I have backed up a lot of my configs and other stuff like that on there, so I'll try to experiment with LVM+luks a little bit and see how it goes. Thanks for the reply again, cheers!
No problem!
Encryption and ssd drives. Not an expert so i am asking: i read that encryption reduces life time of ssd drives. So how much does this process reduce life time of your ssd?
That is something I honestly don't know. I'll have to research on that.
8:43 I made a hiccup here by using my device UUID instead of using the /dev/mapper/___ path... can someone explain what he means by "absolute path"?
Absolute path is the path from root, relative path is path from whatever folder you’re in. For example if you’re in ~, you can just cd Downloads to get to your downloads. But that’s the relative path. The absolute path would be ~/Downloads