Sabayon 10 - Option to use ecryptfs during install

[cl00t]

Apparently the option exists to use ecryptfs during setup to encrypt the home & swap (I am not talking about the option to encrypt the system with luks).
I don't think the option is there as sys-fs/ecryptfs-utils is not on the ISO's.

I made the request for this to be included in SL10 http://bugs.sabayon.org/show_bug.cgi?id=3626 but Fabio replied saying the option was already there & the bug was closed as invalid

[cl00t]

I'm not getting much luck in commenting on the bug report above, but ecryptfs is still not included in the daily iso (at least not the 64bit xfce), so how is it possible to use it during installation? It's a valid feature request, why close the bug as "invalid"?

[lxnay]

I don't think we are interested in using ecryptfs when you can create your custom /home partition and encrypt that with rock solid dmcrypt.

[cl00t]

Ok thanks for answering. Ecryptfs has it's place, not everyone who is interested in keeping personal files away from a laptop thief needs to use dmcrypt. Using Ecryptfs allows me to encrypt swap & my home dir & still allow me to use tools such as clonezilla to create quick backups of the system before large upgrades. Tools such as clonezilla have to resort to dd to copy partitions when they're encrypted with dmcrypt, very inefficient with large drives.
Not everyone needs dmcrypt, an encrypted home & swap is enough for a lot of people.

[lxnay]

you_can_do_encrypted_home_and_swap_through_the_installer_already!

[cl00t]

you_can_do_encrypted_home_and_swap_through_the_installer_already!

Yes I know.
Doesn't dmcrypt encrypt all blocks on the partition / disk whether they contain data or not? Ecryptfs encrypts the data only making tools like clonezilla more efficient if you wanted to image the system quickly before an update or for any reason.

Ie a 500gb home partition with 10gb of data will result in a 500gb saved image using dmcrypt and a 10gb saved image using Ecryptfs.

Encryption of the data only is sufficient for a lot of people, I just think it would be good to have that choice.