This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
doc:x200 [2013/04/25 01:04] stwn [Encrypted Partition] minor fixes |
doc:x200 [2013/05/28 09:17] (current) stwn +backup luks header |
||
|---|---|---|---|
| Line 15: | Line 15: | ||
| ===== Installed Programs ===== | ===== Installed Programs ===== | ||
| - | hdapsd, openssh-server, rsync, synaptic. | + | These programs are installed, including all programs required that stated in Configuration section. |
| - | non-free: firmware-iwlwifi. | + | * Systems: firmware-iwlwifi (non-free), powertop, rsync, synaptic. |
| + | * Desktop: GNOME3 | ||
| + | * Office: LibreOffice, amora-daemon, pdftk. | ||
| + | * Graphics: Inkscape, The Gimp. | ||
| + | * Internet: Jitsi*, Mozilla Firefox*, Pidgin. | ||
| + | * Multimedia: GNOME MPlayer. | ||
| + | * From upstream project, not Debian official repository. | ||
| ===== Configuration ===== | ===== Configuration ===== | ||
| ==== Sudo ==== | ==== Sudo ==== | ||
| * Add your username to sudo group. <code># nano /etc/group</code><code>sudo:x:27:stwn</code> | * Add your username to sudo group. <code># nano /etc/group</code><code>sudo:x:27:stwn</code> | ||
| + | ==== sysfs ==== | ||
| + | |||
| + | * Install sysfsutils. <code># apt-get install sysfsutils</code> | ||
| + | * Edit /etc/sysfs.conf. <code># nano /etc/sysfs.conf</code><code>devices/platform/smapi/BAT0/start_charge_thresh = 40 | ||
| + | devices/platform/smapi/BAT0/stop_charge_thresh = 50 | ||
| + | devices/platform/thinkpad_acpi/bluetooth_enable = 0 | ||
| + | devices/system/cpu/cpu0/cpufreq/scaling_governor = powersave | ||
| + | devices/system/cpu/cpu1/cpufreq/scaling_governor = powersave | ||
| + | class/backlight/acpi_video0/brightness = 5 | ||
| + | class/scsi_host/host0/link_power_management_policy = min_power | ||
| + | class/scsi_host/host1/link_power_management_policy = min_power | ||
| + | module/snd_hda_intel/parameters/power_save_controller = Y | ||
| + | module/snd_hda_intel/parameters/power_save = 1</code> | ||
| ==== HDAPS ==== | ==== HDAPS ==== | ||
| * Install hdapsd and tp-smapi-dkms<code># apt-get install hdapsd tp-smapi-dkms</code> | * Install hdapsd and tp-smapi-dkms<code># apt-get install hdapsd tp-smapi-dkms</code> | ||
| Line 37: | Line 56: | ||
| GRUB_DISABLE_RECOVERY="true"</code> | GRUB_DISABLE_RECOVERY="true"</code> | ||
| * Update GRUB.<code># update-grub2</code> | * Update GRUB.<code># update-grub2</code> | ||
| + | |||
| + | ==== Power ==== | ||
| + | * Edit /etc/default/grub.<code># nano /etc/default/grub</code><code>GRUB_CMDLINE_LINUX_DEFAULT="quiet splash i915.i915_enable_rc6=1"</code> | ||
| + | * Update GRUB.<code># update-grub2</code> | ||
| + | * Reboot. | ||
| ==== Plymouth ==== | ==== Plymouth ==== | ||
| Line 50: | Line 74: | ||
| ===== Encrypted Partition ===== | ===== Encrypted Partition ===== | ||
| - | It is about dm-crypt, cryptsetup, LUKS, and LVM2. | + | |
| + | dm-crypt, cryptsetup, LUKS. | ||
| + | |||
| + | required package: cryptsetup | ||
| + | |||
| + | ==== With LVM2 ==== | ||
| * Backup your data, or else you will lose it. | * Backup your data, or else you will lose it. | ||
| Line 70: | Line 99: | ||
| * Edit /etc/fstab. <code># nano /etc/fstab</code><code>/dev/mapper/yes-crypt /media/crypt ext4 relatime 0 2</code> | * Edit /etc/fstab. <code># nano /etc/fstab</code><code>/dev/mapper/yes-crypt /media/crypt ext4 relatime 0 2</code> | ||
| * Reboot your machine and test it. | * Reboot your machine and test it. | ||
| + | |||
| + | ==== Without LVM ==== | ||
| + | * Backup your data, use rsync. | ||
| + | * Check bad blocks with writing random patterns into partition /dev/sda6. <code># badblocks -v -s -w -t random /dev/sda6</code> | ||
| + | * Setup and initialize partition with LUKS. Supply this commands with your passphrase. <code>cryptsetup -v -y -s 256 luksFormat /dev/sda6</code> | ||
| + | * Open the LUKS format partition with your passphrase. <code># cyptsetup luksOpen /dev/sda6 yes2</code> | ||
| + | * Format ext4 or other type of filesystems. <code># mkfs.ext4 /dev/mapper/yes2</code> | ||
| + | * Cari tahu UUID partisi jika diperlukan. <code># blkid /dev/sda6</code> | ||
| + | * Edit /etc/crypttab.<code># nano /etc/crypttab</code><code>yes2 /dev/sda6 none luks</code>or<code>yes2 UUID=AAAABBBBCCCC none luks</code> | ||
| + | * Check UUID of that partition. <code># blkid /dev/mapper/yes2</code> | ||
| + | * Edit /etc/fstab. <code># nano /etc/fstab</code><code>/dev/mapper/yes2 /media/crypt2 ext4 relatime 0 2</code>or<code>UUID=XXXXYYYYZZZZ /media/crypt2 ext4 relatime 0 2</code>Change the XXXXYYYYZZZZ with the output of blkid command before this step. | ||
| + | |||
| + | ==== Backup LUKS Header ==== | ||
| + | |||
| + | * Run this command for doing LUKS header backup. <code># cryptsetup luksHeaderBackup --header-backup-file mymachine.sdaX /dev/sdaX</code> | ||
| + | * Run this command for doing LUKS header restore. <code># cryptsetup luksHeaderRestore --header-backup-file mymachine.sdaX /dev/sdaX</code> | ||
| + | |||