Are the Linux system partitions encrypted by default ?, I’ve tried to encrypt them using Veracrypt, but it says that it only works on Windows ?.

  • GenkiFeral@lemmy.ml
    link
    fedilink
    arrow-up
    0
    arrow-down
    1
    ·
    3 years ago

    you must’ve downloaded the wrong VeraCrypt pogram. Download one for your Linux system after deleting the one you have now.

      • Arthur Besse@lemmy.mlM
        link
        fedilink
        arrow-up
        1
        ·
        3 years ago

        VeraCrypt can encrypt entire disks on Linux but, as far as I’ve seen, nobody has done the work to make Linux boot from a VeraCrypt volume. In theory it should be possible the same as it is with LUKS, though - someone would just need to write the scripts to build an initrd that decrypts a veracrypt partition and calls pivot_root.

  • CHEF-KOCH@lemmy.ml
    link
    fedilink
    arrow-up
    0
    arrow-down
    1
    ·
    3 years ago

    Cryptsetup or dm-crypt are the normal standards for most Linux Distros, which you can manually enable on fresh installation, via GUI or trough cmdline installation, or network installation.

    The reason why encryption is usually not enable by default is due to performance reasons and advance users typically work with encrypted swap containers instead which has some performance benefits. Same like Windows does not enable it by default btw. with the exception that Linux actually provides you with more GUI toggles here, - assuming you work with a GUI based installation - among some other benefits during installation like setting up swap etc.

    VeraCrypt also works for Linux but is considerable not the standard because it is normally not preinstalled and you need to download, install and setup it afterwards. This alone can be critical, because such programs a large target for drive-by malware infections aka downloading fakes from third-party pages that might be knowingly or unknowingly infected or otherwise compromised.

    As sasalzig stated correctly in most distros other solutions are integrated or usually preferred because for example cryptsetup has tremendous amount of maintainers, developers behind while other solutions are less popular or have less actual man and women power behind.