[tor-relays] cryptsetup some folders

Duncan Guthrie dguthrie at posteo.net
Tue Oct 25 10:03:09 UTC 2016


Hi folks, 

I am not sure it is more secure. What are we trying to protect here? As long as the relay is running,it is unencrypted. Disk encryption only prevents physical access - are you at risk of this? At any rate, the relay shouldn't be storing personal data. 

Having it encrypted also makes remote management an absolute pain.
 
Can someone clarify this?
-- D

On 24 October 2016 08:53:14 BST, Petrusko <petrusko at riseup.net> wrote:
>Hey all,
>
>I'm planning to customise a RPi with Raspbian already running, and
>using
>cryptsetup (LUKS) to have a partition more secure for some reasons...
>So the goal is to move some existing sensitive folders to this new
>encrypted partition.
>Some sym-links will be used for those directories.
>
>About Tor, if I'm not wrong, those directories can be moved to this
>encrypted partition :
>/var/lib/tor : so I'm planning to move /var...
>
>So at final, planning to move :
>/home
>/var
>/tmp
>(why not swap file ?)
>
>Any suggestions and master's thoughts are welcome :)
>
>-- 
>Petrusko
>EBE23AE5
>
>
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>tor-relays mailing list
>tor-relays at lists.torproject.org
>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20161025/5748d344/attachment.html>


More information about the tor-relays mailing list