LWN.net Logo

What's next in Red Hat Enterprise Linux (part 2) (Red Hat Magazine)

Here's the second half of Red Hat Magazine's look at features to be found in future RHEL releases. "One of the most requested features since the release of Enterprise Linux 5 is encrypted device support. We support encrypted devices via a technology called LUKS. LUKS, implemented on top of the existing device-mapper cryptography code, standardizes the partition header for the automatic detection of encrypted devices. It also allows for multiple passphrases to decrypt the device. For example, if I insert an encrypted USB stick, the encrypted device is detected via HAL, the GNOME file manager prompts me for the passphrase, and LUKS unlocks the device-which is then mounted and ready to use."
(Log in to post comments)

What's next in Red Hat Enterprise Linux (part 2) (Red Hat Magazine)

Posted Aug 1, 2008 15:28 UTC (Fri) by hildeb (subscriber, #6532) [Link]

Doesn't Ubuntu already have all this?

What's next in Red Hat Enterprise Linux (part 2) (Red Hat Magazine)

Posted Aug 1, 2008 16:51 UTC (Fri) by dowdle (subscriber, #659) [Link]

I haven't heard of this "Ubuntu" thing you mentioned.  What is it?

But seriously, the difference here is the "Enterprise" part.  If you want to compare Fedora
and Ubuntu, fine.  They are pretty much neck and neck with regards to feature set.

Many of those features are fairly new and at a questionable level of stability and
robustness... so you don't want them in an "Enterprise" distribution just yet... but since
RHEL 6 is some time away... perhaps all of that stuff will have been improved upon enough.
With Red Hat bumping them up to "Enterprise", they surely will get a lot more testing and
coding that Ubuntu (and everyone else) can benefit from.  The difference is that most/much of
Red Hat's work (and Fedora's too) makes it upstream.

What's next in Red Hat Enterprise Linux (part 2) (Red Hat Magazine)

Posted Aug 1, 2008 17:13 UTC (Fri) by salimma (subscriber, #34460) [Link]

SUSE is first with encrypted partition support; however, since gvfs is brand-new, it's likely
that Fedora 9 is one of the first distributions that integrates LUKS with gvfs.

The neatest thing is the FUSE integration. All your command-line tools still work!

What's next in Red Hat Enterprise Linux (part 2) (Red Hat Magazine)

Posted Aug 1, 2008 21:21 UTC (Fri) by drag (subscriber, #31333) [Link]

I use LUKS with Debian Testing/Unstable as my root partition.

All the tools and the scripts seem to support it just fine. Unfortunately the installer
doesn't seem to support it at this time, only dmcrypt sans luks. So I was forced to do the
install via debootstrap, (which is how I do it most of the time anyways since I dislike
farting around with ISO disks and cdroms when most my computers don't have a drive for it...)

LUKS support in debian-installer

Posted Aug 2, 2008 9:19 UTC (Sat) by mv (subscriber, #17258) [Link]

> the installer doesn't seem to support it at this time, only dmcrypt sans luks

It does. :-) 

LUKS has been supported together with loop-AES and plain dm-crypt since before the first
released version (Debian etch).

I see where we might be creating a different perception:

In the installer menu we call the encryption system "dm-crypt" [1]. Depending on the key type
it will create a LUKS partition ("Passphrase") or a plain dm-crypt mapping (volatile one-time
"Random key").

[1] Calling it dm-crypt is technically correct - LUKS really is dm-crypt plus key and
parameter management, but it completely hides the fact that some key types imply a LUKS
header.

What's next in Red Hat Enterprise Linux (part 2) (Red Hat Magazine)

Posted Aug 2, 2008 3:01 UTC (Sat) by mattdm (subscriber, #18) [Link]

C'mon, let's not have distro trolls here.

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds