- https://github.com/Benjamin-Loison
- Joined on
2022-10-16
Block a user
How to enable full disk encryption after install?
/mnt/etc/fstab:
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this…
How to enable full disk encryption after install?
On my Debian 12 GNOME laptop:
/etc/fstab:
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique…
How to enable full disk encryption after install?
df -h /mnt/
Output:
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/recrypt 30G 11G 18G 37% /mnt
How to enable full disk encryption after install?
sudo fdisk -l
Output:
Disk /dev/vda: 30 GiB, 32212254720 bytes, 62914560 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/ph…
How to enable full disk encryption after install?
sudo cryptsetup open /dev/vda1 recrypt
Enter passphrase for /dev/vda1:
sudo resize2fs /dev/mapper/recrypt
Output:
re…
How to enable full disk encryption after install?
sudo cryptsetup reencrypt --encrypt --reduce-device-size 32M /dev/vda1
Output:
WARNING!
========
This will overwrite data on LUKS2-temp-4ce57c…
How to enable full disk encryption after install?
sudo resize2fs -p -M /dev/vda1
Output:
resize2fs 1.47.0 (5-Feb-2023)
Resizing the filesystem on /dev/vda1 to 3039933 (4k) blocks.
Begin pass…
How to enable full disk encryption after install?
sudo e2fsck -f /dev/vda1
Output:
e2fsck 1.47.0 (5-Feb-2023)
Pass 1: Checking inodes, blocks, and sizes
Pass 2: Checking directory structure
P…
How to enable full disk encryption after install?
What about Debian 12 GNOME to just encrypt ext4 with LUKS without LVM?
Run a command when fill a given percentage of the disk
Make my SSH
aliases prefer LAN over Internet but with a single command
Related to the Tchap message:
-----BEGIN PGP MESSAGE-----
hF4DTQa9Wom5MBgSAQdAycDV10QlwYFArtWO/ke29QUpyvK0fmK1K3R9MMi/nDAw
/bJw+oaDXIAkw48U44lYzMVZLlt/ETtW…
Get user running commands
How to block access to other user home folder?
So
So chmod 700 /home/user/ is enough, according to the Tchap message:
-----BEGIN PGP MESSAGE-----
hF4DTQa9Wom5MBgSAQdAkhoqOO949rTBpmqFjqZNH/cXBU2…
How to block access to other user home folder?
ls -lah ~
Output:
total 360K
drwx--x---+ 32 benjamin_loison benjamin_loison 4.0K Jan 23 15:22 .
drwxr-xr-x 3 root root …
Avoid users to see commands executed by others
Can see how much the computer is being used (possibly by the system or other users)? To figure out if running something will be efficient or wait someone else finishing something.
Can have
https://domain.name/a and https://domain.name/b use different certificates?