Linux Lite Forums
Software - Support => Installing Linux Lite => Topic started by: mountainhick on May 24, 2019, 11:55:53 AM
-
I am used to other distros with installation option "encrypt home folder" on installation. Is this the same or different from "Encrypt the new Linux installation for security" with LL?
-
@mountainhick ,
No. That is a feature to encrypt the entire Linux Lite installation, similar to full disk encryption. You'll have a password/key to enter before getting to the operating system to log in to the desktop.
Maybe encrypt home folder during the install was removed as a feature during installation because it caused problems like this one:
https://www.linuxliteos.com/forums/installing-linux-lite/linux-lite-install-stalls-on-creating-user/msg37422/#msg37422 (https://www.linuxliteos.com/forums/installing-linux-lite/linux-lite-install-stalls-on-creating-user/msg37422/#msg37422)
I do believe there is a way to encrypt the home folder post installation. But I admit I'm having some time finding that in the Help Manual. Previously, it was suggested if you encrypted the home folder to do so after installing Linux Lite. I encrypt the entire installation, but if you share the PC with other users, I can see why you might want to allow each user to have their home folder encrypted.
-
@mountainhick ,
No. That is a feature to encrypt the entire Linux Lite installation, similar to full disk encryption. You'll have a password/key to enter before getting to the operating system to log in to the desktop.
Maybe encrypt home folder during the install was removed as a feature during installation because it caused problems like this one:
https://www.linuxliteos.com/forums/installing-linux-lite/linux-lite-install-stalls-on-creating-user/msg37422/#msg37422 (https://www.linuxliteos.com/forums/installing-linux-lite/linux-lite-install-stalls-on-creating-user/msg37422/#msg37422)
I do believe there is a way to encrypt the home folder post installation. But I admit I'm having some time finding that in the Help Manual. Previously, it was suggested if you encrypted the home folder to do so after installing Linux Lite. I encrypt the entire installation, but if you share the PC with other users, I can see why you might want to allow each user to have their home folder encrypted.
Thanks for the response, That's what I expected. I don't have the expertise to encrypt post install so no Lite I guess.
-
This is the instruction I followed after installing LL 4.2 to get Home dir encrypted:
https://www.howtogeek.com/116032/how-to-encrypt-your-home-folder-after-installing-ubuntu/
If I remember it correctly, ecryptfs-utils is already installed with LL.
-
FYI Ubuntu dumped this feature in the installer for series 18.04
Sent from my Mobile phone using Tapatalk
-
Well - before Ubuntu dumped it, I had at least two computers I was installing Linux onto where I experienced the installation was freezing up on me. In both cases it turned out to be the choice "encrypt home" that had to be disabled in order to proceed.
But - Ubuntu also removed the ability to create new users afterwards with encrypded home folder.
-
Ubuntu still allows encryption during the installation wizard, but it's encryption for the entire install. Makes sense if you think about it. Why would anyone encrypt just their home folder? They've simply omitted an extra unnecessary step.
Sent from my Mobile phone using Tapatalk
-
. . . .Why would anyone encrypt just their home folder? They've simply omitted an extra unnecessary step.
I have a very practical case/reason for that.
I have this situation where I have two separate users. The two users should NOT be able to see each other files (even using a Live-CD session when always admin). At the same time, there are files that both users should have full access to - located on another partition not encrypted.
In that case - the use of encrypted home folder is very usefull.
Btw - the best practice (least amounts of steps to create a user with encrypted home dir) is to plan the installation in such a way that there is no need to have first user being using an encrypted home dir.
And the most efficient method to create a user profile with encrypted home folder is probably using Terminal:
~$ sudo adduser --encrypt-home put-username-here
~$ passwd put-username-here