Are the Linux system partitions encrypted by default ?, I’ve tried to encrypt them using Veracrypt, but it says that it only works on Windows ?.

CHEF-KOCH
link
fedilink
23Y

Cryptsetup or dm-crypt are the normal standards for most Linux Distros, which you can manually enable on fresh installation, via GUI or trough cmdline installation, or network installation.

The reason why encryption is usually not enable by default is due to performance reasons and advance users typically work with encrypted swap containers instead which has some performance benefits. Same like Windows does not enable it by default btw. with the exception that Linux actually provides you with more GUI toggles here, - assuming you work with a GUI based installation - among some other benefits during installation like setting up swap etc.

VeraCrypt also works for Linux but is considerable not the standard because it is normally not preinstalled and you need to download, install and setup it afterwards. This alone can be critical, because such programs a large target for drive-by malware infections aka downloading fakes from third-party pages that might be knowingly or unknowingly infected or otherwise compromised.

As sasalzig stated correctly in most distros other solutions are integrated or usually preferred because for example cryptsetup has tremendous amount of maintainers, developers behind while other solutions are less popular or have less actual man and women power behind.

Debian allows setting up disk encryption during install for example. Never heard of VeraCrypt, I don’t think that’s popular on Linux. The relevant under the hood parts if you’re interested in how it works on Linux are:

  • dm-crypt: Linux kernel feature for accessing encrypted partitions
  • Luks: A header format / standard for encrypted partitions
  • cryptsetup: command line tool to set up and manage all this

you must’ve downloaded the wrong VeraCrypt pogram. Download one for your Linux system after deleting the one you have now.

alex
link
fedilink
03Y

No, VeraCrypt only offers full-disk encryption on Windows

oh. I wrongly assumed that because it encrypted my entire flash drive that it would encrypt other drives.

mekhos
link
fedilink
03Y

Not by default. If Veracrypt isn’t a deal-breaker, search something like “linux DM-crypt”

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

  • 0 users online
  • 5 users / day
  • 20 users / week
  • 27 users / month
  • 16 users / 6 months
  • 20 subscribers
  • 684 Posts
  • 1.7K Comments
  • Modlog