aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFrancis Rowe <info@gluglug.org.uk>2014-09-11 05:26:50 +0100
committerFrancis Rowe <info@gluglug.org.uk>2014-09-11 05:26:50 +0100
commita7d8d59ac1eb23b538b9dc5d3dc0fa639663ac83 (patch)
treea359bae670c6493f06021f4a071ef45abcf2829a
parent455a1c32b5d2da4ca693b7e7ea46012c6cad02f0 (diff)
downloadlibrebootfr-a7d8d59ac1eb23b538b9dc5d3dc0fa639663ac83.tar.gz
librebootfr-a7d8d59ac1eb23b538b9dc5d3dc0fa639663ac83.zip
Documentation: add notes about performance penalty when using ecryptfs.
-rw-r--r--docs/howtos/encrypted_trisquel.html14
1 files changed, 12 insertions, 2 deletions
diff --git a/docs/howtos/encrypted_trisquel.html b/docs/howtos/encrypted_trisquel.html
index 2529da4c..e4b60fc7 100644
--- a/docs/howtos/encrypted_trisquel.html
+++ b/docs/howtos/encrypted_trisquel.html
@@ -35,8 +35,14 @@
</p>
<p>
- Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols) and when the installer asks you to setup
- encryption (ecryptfs) for your home directory, select 'Yes'.
+ Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols).
+ </p>
+
+ <p>
+ when the installer asks you to setup
+ encryption (ecryptfs) for your home directory, select 'Yes' if you want to: <b>LUKS is already secure and performs well. Having ecryptfs on top of it
+ will add noticeable performance penalty, for little security gain in most use cases. This is therefore optional, and not recommended.
+ Choose 'no'.</b>
</p>
<p>
@@ -184,6 +190,10 @@
</h1>
<p>
+ If you didn't encrypted your home directory, then you can safely ignore this section.
+ </p>
+
+ <p>
Immediately after logging in, do that:<br/>
$ <b>sudo ecryptfs-unwrap-passphrase</b>
</p>