From Fedora Project Wiki
mNo edit summary
(adding a comment)
Line 1: Line 1:
Q: How would encryption of /home and / sub volumes be implemented?
Q1: How would encryption of /home and / sub volumes be implemented?


A: For the F33 timeline, we plan to stick with Btrfs-on-LUKS, so there will be one big LUKS partition, on top of which there will a Btrfs with multiple subvolumes (root and home). In future, once Btrfs implements native encryption (this is work in progress upstream), we will propose to make a switch, but this is definitely not going to happen in F33.
A1: For the F33 timeline, we plan to stick with Btrfs-on-LUKS, so there will be one big LUKS partition, on top of which there will a Btrfs with multiple subvolumes (root and home). In future, once Btrfs implements native encryption (this is work in progress upstream), we will propose to make a switch, but this is definitely not going to happen in F33.
 
Comment1: Sounds great. Thanks for the information.Should this be documented in https://fedoraproject.org/wiki/Changes/BtrfsByDefault#Detailed_Description or is the 'on-LUKS' not default?

Revision as of 09:01, 26 June 2020

Q1: How would encryption of /home and / sub volumes be implemented?

A1: For the F33 timeline, we plan to stick with Btrfs-on-LUKS, so there will be one big LUKS partition, on top of which there will a Btrfs with multiple subvolumes (root and home). In future, once Btrfs implements native encryption (this is work in progress upstream), we will propose to make a switch, but this is definitely not going to happen in F33.

Comment1: Sounds great. Thanks for the information.Should this be documented in https://fedoraproject.org/wiki/Changes/BtrfsByDefault#Detailed_Description or is the 'on-LUKS' not default?