Tjyylli

What is the topology associated with the algebras for the ultrafilter monad?

Do I really need to have a message in a novel to appeal to readers?

How to tell that you are a giant?

Selecting user stories during sprint planning

Is CEO the "profession" with the most psychopaths?

What is the appropriate index architecture when forced to implement IsDeleted (soft deletes)?

AppleTVs create a chatty alternate WiFi network

Using audio cues to encourage good posture

Is it fair for a professor to grade us on the possession of past papers?

Find 108 by using 3,4,6

Take 2! Is this homebrew Lady of Pain warlock patron balanced?

The code below, is it ill-formed NDR or is it well formed?

Why is my ESD wriststrap failing with nitrile gloves on?

An adverb for when you're not exaggerating

What is the font for "b" letter?

How do living politicians protect their readily obtainable signatures from misuse?

Can anything be seen from the center of the Boötes void? How dark would it be?

Central Vacuuming: Is it worth it, and how does it compare to normal vacuuming?

Putting class ranking in CV, but against dept guidelines

Is a ledger board required if the side of my house is wood?

Converted a Scalar function to a TVF function for parallel execution-Still running in Serial mode

Would the Life Transference spell be unbalanced if it ignored resistance and immunity?

Performance gap between vector<bool> and array

Chinese Seal on silk painting - what does it mean?

Is it possible to skip the secure delete step when installing Debian with LUKS full-disk encryption?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}

1

I'm installing Debian using LUKS full-disk encryption onto brand new 500GB hard drives. Currently it's taking ~24 hours to prep the drive for installation by securely deleting the drive. Since it's a brand new drive that's never been used before, is it possible to configure the install process to skip the secure delete step so it doesn't take so long to install?

I'm using a preseed file to drive the install, so if such configurations exist it'd be great to know what the specific preseed options are.

debian luks

share|improve this question

asked May 3 '15 at 14:33

BryanBryan

3083616

add a comment | 

1

I'm installing Debian using LUKS full-disk encryption onto brand new 500GB hard drives. Currently it's taking ~24 hours to prep the drive for installation by securely deleting the drive. Since it's a brand new drive that's never been used before, is it possible to configure the install process to skip the secure delete step so it doesn't take so long to install?

I'm using a preseed file to drive the install, so if such configurations exist it'd be great to know what the specific preseed options are.

debian luks

share|improve this question

asked May 3 '15 at 14:33

BryanBryan

3083616

add a comment | 

I'm installing Debian using LUKS full-disk encryption onto brand new 500GB hard drives. Currently it's taking ~24 hours to prep the drive for installation by securely deleting the drive. Since it's a brand new drive that's never been used before, is it possible to configure the install process to skip the secure delete step so it doesn't take so long to install?

I'm using a preseed file to drive the install, so if such configurations exist it'd be great to know what the specific preseed options are.

debian luks

share|improve this question

asked May 3 '15 at 14:33

BryanBryan

3083616

share|improve this question

asked May 3 '15 at 14:33

BryanBryan

3083616

share|improve this question

asked May 3 '15 at 14:33

BryanBryan

3083616

asked May 3 '15 at 14:33

BryanBryan

3083616

asked May 3 '15 at 14:33

BryanBryan

3083616

1 Answer
1

active

oldest

votes

0

Possible --sure BUT that makes it less secure, while not widely known in the general public there are often loggers and / or traces of the initial mbr and such in brand new drives that are NOT wiped by the default formating (which is more like a etch-a-sketch than a proper format as it merely wipes out the "journal" not the wiping the signatures and inode redirects at the lower level... If this is merely for luks experience and not truly to protect highly sensitive materials skipping it is fine.. Just remember for any proper /secure install skipping it invites vulnerabilities that a decently skilled investigator / attacker can with much more ease exploit. also sidenote seeing as its a NEW drive... Get the full extent of the drive put at your disposal -- the default formatting uses more overhead than most installs (especially luks ones) need to make them universally useable.

EDIT: Updated process:

1. DON'T wipe the drive use the default format done at time of luksDevice Format




2. Proceed with install




3. have a admittedly more vulnerable but useable Luks'd install.

share|improve this answer

edited 10 hours ago

Evan Carroll

4,391853105

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  This answers the 'is it possible' part, but not the actual 'how to' section of the question. Can you update to include that information to create a full answer? Otherwise this is basically just a security warning...
  
  – Michael Frank
  May 3 '15 at 22:54
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f909216%2fis-it-possible-to-skip-the-secure-delete-step-when-installing-debian-with-luks-f%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

0

Possible --sure BUT that makes it less secure, while not widely known in the general public there are often loggers and / or traces of the initial mbr and such in brand new drives that are NOT wiped by the default formating (which is more like a etch-a-sketch than a proper format as it merely wipes out the "journal" not the wiping the signatures and inode redirects at the lower level... If this is merely for luks experience and not truly to protect highly sensitive materials skipping it is fine.. Just remember for any proper /secure install skipping it invites vulnerabilities that a decently skilled investigator / attacker can with much more ease exploit. also sidenote seeing as its a NEW drive... Get the full extent of the drive put at your disposal -- the default formatting uses more overhead than most installs (especially luks ones) need to make them universally useable.

EDIT: Updated process:

1. DON'T wipe the drive use the default format done at time of luksDevice Format




2. Proceed with install




3. have a admittedly more vulnerable but useable Luks'd install.

share|improve this answer

edited 10 hours ago

Evan Carroll

4,391853105

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  This answers the 'is it possible' part, but not the actual 'how to' section of the question. Can you update to include that information to create a full answer? Otherwise this is basically just a security warning...
  
  – Michael Frank
  May 3 '15 at 22:54
  

  
  
  
  

add a comment | 

0

Possible --sure BUT that makes it less secure, while not widely known in the general public there are often loggers and / or traces of the initial mbr and such in brand new drives that are NOT wiped by the default formating (which is more like a etch-a-sketch than a proper format as it merely wipes out the "journal" not the wiping the signatures and inode redirects at the lower level... If this is merely for luks experience and not truly to protect highly sensitive materials skipping it is fine.. Just remember for any proper /secure install skipping it invites vulnerabilities that a decently skilled investigator / attacker can with much more ease exploit. also sidenote seeing as its a NEW drive... Get the full extent of the drive put at your disposal -- the default formatting uses more overhead than most installs (especially luks ones) need to make them universally useable.

EDIT: Updated process:

1. DON'T wipe the drive use the default format done at time of luksDevice Format




2. Proceed with install




3. have a admittedly more vulnerable but useable Luks'd install.

share|improve this answer

edited 10 hours ago

Evan Carroll

4,391853105

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  This answers the 'is it possible' part, but not the actual 'how to' section of the question. Can you update to include that information to create a full answer? Otherwise this is basically just a security warning...
  
  – Michael Frank
  May 3 '15 at 22:54
  

  
  
  
  

add a comment | 

Possible --sure BUT that makes it less secure, while not widely known in the general public there are often loggers and / or traces of the initial mbr and such in brand new drives that are NOT wiped by the default formating (which is more like a etch-a-sketch than a proper format as it merely wipes out the "journal" not the wiping the signatures and inode redirects at the lower level... If this is merely for luks experience and not truly to protect highly sensitive materials skipping it is fine.. Just remember for any proper /secure install skipping it invites vulnerabilities that a decently skilled investigator / attacker can with much more ease exploit. also sidenote seeing as its a NEW drive... Get the full extent of the drive put at your disposal -- the default formatting uses more overhead than most installs (especially luks ones) need to make them universally useable.

EDIT: Updated process:

1. DON'T wipe the drive use the default format done at time of luksDevice Format




2. Proceed with install




3. have a admittedly more vulnerable but useable Luks'd install.

share|improve this answer

edited 10 hours ago

Evan Carroll

4,391853105

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819

share|improve this answer

edited 10 hours ago

Evan Carroll

4,391853105

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819

edited 10 hours ago

Evan Carroll

4,391853105

edited 10 hours ago

Evan Carroll

4,391853105

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819

answered May 3 '15 at 14:44

linuxdev2013linuxdev2013

974819