[04:18] I have an Eclipse Fit Clip Plus 8GB MP3 + Video player which I want to download music to. Windows is stated for the download on their recommendation of iTunes and I have Xubuntu with LInux and Firefox on my laptop. Can you assist me in the process I will need to download music to this new MP3 player? === mnepton is now known as mneptok [05:39] Anyone here? [09:18] how to upgrade zubuntu 14.04 to 14.10 online [09:20] xubuntu41o: 14.10 is out of support since the middle of last year https://wiki.ubuntu.com/Releases [09:20] the next simple upgrade for 14.04 will be when 16.04 is released, you'll get the LTS to LTS upgrade option [10:50] hi, i need to run a program as root , how do i "run as administrator" from xfce like you have on windows? [10:55] gksudo did the trick :) [19:45] hiya! with EFI and separate /boot partition, which partition should I install the bootloader to? [19:45] I selected the whole disk, /dev/sda, is that right? [19:46] nevermind actually. i'll see after a reboot :D [19:46] good question, i think the whole /dev/sda [19:52] so which is the right answer? now i am second guessing myself [19:59] huh? ---> "Note that in a UEFI-mode installation, Ubuntu will not ask you where to install the boot loader" [19:59] https://help.ubuntu.com/community/UEFI [19:59] OK so installing the bootloader to /dev/sda *did* work. Also it did ask me, because I chose "something else" [19:59] HOWEVER [20:00] I had set up the luks-encrypted LVM vg already, but when I tried to use "something else" and selected those logical volumes to install the OS to, it installed, but i guess it didn't realize that those partitions were encrypted. [20:01] Cant have the boot loader encrypted I suppose, since when it runs there is no software to decrypt stuff [20:01] So I have an almost-working installation, but it doesn't ask me for the disk password on startup, so it gives up and goes to the BusyBox initramfs. [20:01] AFAIK that comes when it starts loading the initramfs? [20:01] Oh well, ESP and /boot were NOT on the vg [20:01] so they were unencrypted [20:01] but I guess i need to edit /etc/crypttab? [20:02] xubuntu-07i: why not set up encryption, during install? [20:02] xubuntu-07i: and why use LVM? [20:03] xubuntu-07i, unfortunately I've never done such a thing so can't help you there :P [20:03] I wanted to have a separate /home partition. If I choose "encrypt the disk" ubiquity selects "use lvm" also. So I thought i had to. Also it makes things easier to resize and stuff. [20:03] Also, if I chose "install with encrypted LVM" it would not create a home partition, so I had to do that bit myself [20:05] xubuntu-07i: i use LUKS with no LVM, keeps it simple [20:05] hmmmm [20:05] xubuntu-07i: you gotta do "something else" [20:05] the only way i can think of encrypting / and /home as a group would be to use LVM though... [20:06] if you just want encrypted /home with LUKS, and no LVM [20:06] No I want encrypted / too [20:06] cause I prefer LUKS over ecryptfs (the "encrypt my home folder" option) [20:06] yes, LUKS is best [20:07] but you mean mean you only want to have to enter the password once? to decrypt both / & /home ? [20:07] good question [20:09] how do you do that? [20:09] idk but i did it before... [20:09] i dont like LVM cuz it adds needless complexity [20:10] I especially don't want an encrypted volume inside another one because I assumed that would cause a lot of SSD-damaging writes [20:10] I have a system installed but not booting so i think lack of /etc/crypttab is the culprit [20:11] when doing "something else" i select "Primary, "physical volume for encryption" ext4" <--- that does LUKS [20:12] With unlocking Home there seems to be a way to do this using keys that are saved in files also? [20:12] If I with my 10 minute googling understand it correctly [20:12] xubuntu-07i: also make sure it's formatted to GPT before you start [20:12] That you could have the / unlocked by password, and then automatically unlock rest by keys stored in files on the root partition [20:13] xubuntu-07i: and before that, do a ATA secure erase, if it is a used drive (that speeds it up) GNOME disks does it [20:13] for SSD ^ [20:13] Since the keys would then be encrypted by the first password, and readable only by root (in which case someone has root access on your machine you have bigger problems) [20:13] Suppose I should stop rambling now :D [20:13] Walliski I would do that but I think crypto-in-crypto is bad for SSDs [20:14] Oh and if adding crypttab doesn't work, Linus_ I'll try that [20:14] Humm ? [20:15] http://worldofgnome.org/uploads/2012/08/erase-options.png [20:15] Wouldnt that be 2 different encryptions on 2 different partitions, but the first one unlocks the second? [20:15] Well I think you implied there would be /, which is encrypted and then a file in the / part needed to unlock the /home part, right? [20:15] Ohhh [20:15] http://worldofgnome.org/a-preview-of-gnome-disks-3-6/ [20:15] http://www.anandtech.com/show/2738/8 [20:15] Linus_ I'll do that if this crypttab thing doesn't work [20:15] https://wiki.archlinux.org/index.php/SSD_Memory_Cell_Clearing [20:15] Unfortunately I'm on IRC from the live medium so I'd have to reconnect to test it out [20:16] which would be now, brb [20:23] * xubuntu-07i sighs [20:24] it didn't work this time [20:24] :( [20:25] Linus_ what was your approach for separate /home again? [20:25] xubuntu-07i: what didnt work? [20:26] adding an entry for magnesium (my vg's name) to /etc/crypttab [20:26] my way works, except you need to input the password twice--- now i'm curious, as to a way around thta [20:26] I think LVM is that way... [20:26] VG means, LVM right [20:26] why do you want LVM? [20:27] Because still using partitions is a bit oldskool. [20:28] I don't want an encrypted home folder inside of the encrypted root volume, I *do* want them both encrypted, and I want them on separate volumes [20:28] that's why [20:28] LVM adds complexity/overhead, more chance of corruption, --- encryption is already doing enough of that :P [20:28] Then dont encrypt your home folder, when having a fully encrypted system already. [20:28] Linus_: LVM is state of the art, nowadays. [20:29] bekks: he wants separate partitions though [20:29] xubuntu-07i: that is another option, use one parition [20:29] LVM, multiple volumes, done. [20:30] The problem is that Ubiquity didn't see /dev/mapper/magnesium-{root,home,swap} as encrypted partitions, it saw them as separate disks. So if I install to those separate volumes using ubiquity, it thinks the system has three unencrypted disks. [20:30] Which results in my laptop not asking for my passphrase on boot, which is where I am now. [20:30] you can have separate partitions, for / /home, with LUKS. you dont need LVM for that [20:31] Though if I do that, can I encrypt them as one volume? [20:31] xubuntu-07i: i think you need to enter ur password twice [20:32] xubuntu-07i: You can encrypt your disk fully, then setup LVM inside your encrypted disk. [20:32] xubuntu-07i: You will have one encryption level, and as many volumes as you want. === mnepton is now known as mneptok [20:33] Yes! OK how do I do that? I'm on the installation medium, and I have a backup of /home [20:33] That's how it was before [20:33] that is the other option, but is adding the complexity of LVM, worth the couple seconds you save entering password once. IMO, no [20:33] bekks: Linus_: LVM is state of the art, nowadays. [20:34] xubuntu-07i: I know. Thats what I told you. [20:34] Right. I feel like we're going in circles? [20:34] ur choice, i just like to keep things simple, streamlined. i hate corrupted disks, problems, etc [20:34] xubuntu-07i: So you want full disk encryption, and LVM? [20:34] Yes that's right [20:35] xubuntu-07i: OK. :) [20:35] now i am curious , if there is a way to enter password once, *without* LVM, hmmmm, any linux wizards in here? [20:35] becuase that is what you really want right? ^ [20:35] xubuntu-07i: https://help.ubuntu.com/community/FullDiskEncryptionHowto [20:36] http://i.imgur.com/izFv7j0.png if that's what I did, couldn't I just add a /home partition after the install? [20:37] I think that tutorial is pre-EFI bekks [20:37] xubuntu-07i: I never used the graphical installer until now. [20:37] another downside of that option, is you cant do GPT xubuntu-07i [20:37] GPT is "state of the art" :P [20:38] which option, the screenshot i posted or the wiki tutorial [20:38] Only if your computer fully supported UEFI. [20:38] It does [20:38] Linus_: And why cant he use GPT? [20:38] ^ [20:38] erm... they/them/their please [20:39] oh, i thought that was a link to the auto-installation. if you click auto-install/encrypt. it forces MBR, and swap. correct? [20:39] Linus_: No. [20:40] If you are doing it again from the beginning, take a look at the Arch wiki [20:40] Since there were different ways of doing it [20:40] Mind resending that link? [20:40] Of which some are mentioned already, e.g. creating encrypted drive, and LVM inside that... or LVM on outside, and encrypting afterwards... [20:40] https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Overview [20:41] i'm pretty that his screenshot does MBR-only (not GPT) , but maybe newer versions of ubuntu fixed that? [20:43] Then again it might need some magic to fit toghether with the xubuntu installation, however it says which steps are required [20:43] xubuntu-07i: if you want to get real fancy, you can recompile cryptsetup, to give you better key-stretching :) [20:44] oh, wait, you dont have to recompile, but IMO , it is easier that way [20:44] Last time I did that it worked with EFI (don't ask why there *was* a last time, though :P) [20:46] xubuntu-07i: ur screenshot works with EFI, i think.... but not GPT, iirc [20:46] .................................. [20:46] I think as long as my EFI can boot to my drive it doesn't matter the partition scheme :P [20:47] Start the ubuntu server install, create the full disk encryption using GPT, and you are fine. Instead discussing it in here, endlessly. [20:47] ubuntu server eh? [20:47] xubuntu-07i: the screenshot, also makes a SWAP. which i dont like [20:47] why not? [20:48] xubuntu-07i: text based installation, option to create full disk encryption. [20:48] RAM is cheap. xubuntu-07i [20:48] xubuntu-07i: Because he dont like suspend to disk. [20:48] yea i want that [20:48] Then you need swap. [20:48] right [20:48] ok [20:49] As large as your RAM, plus about 100M. [20:49] and swap is security vuln.. like i said, i like my computer streamlined :P [20:49] How dangerous would it be to write the ubuntu server iso to the USB drive i'm booted on? live boots from ramdisk right? [20:49] http://thesimplecomputer.info/full-disk-encryption-with-ubuntu [20:49] http://thesimplecomputer.info/pages/ubuntu-fde-condensed [20:50] great info, explains what i've been saying, but he is more hardcore than me :P [20:50] xubuntu-07i: No ramdisk involved. [20:50] xubuntu-07i: It would be booting the ubuntu server installer from USB. [20:51] plus, i've went thru corrupted HDDs,---- not fun. Clean-room prices suck. [20:51] You didnt have backups then, right? [20:52] I would assume not. [20:52] Then the data was not worth being kept. [20:53] what is the big benefit of suspend-to-disk, anyway? [20:53] Continuing a pointless discussion. [20:53] not pointless, i'm asking what i'm missing.. [21:00] Sometimes I need to suspend for a long time, or because I left the battery at home to reduce weight. [21:03] i just log out. safer. but if you r gonna stay logged in.... use "vlock -sn" instead of xscreensaver, to lock ur screen [21:03] why not xscreensaver? [21:03] not hardcore enough :P [21:04] usually suspend to disk locks first [21:04] then again if you log out you loose your session, and would need to open all programs and stuff again [21:04] O:) [21:05] xubuntu-07i: oh wait...... if you use a Password for "/" and a keyfile for "/home" , that should work, with one password [21:05] No LVM needed.... Tada! [21:06] If home fills up I'd like to be able to resize it later [21:07] I think I've got it from here. I'm using http://thesimplecomputer.info/full-disk-encryption-with-ubuntu and adjusting for LVM [21:07] xubuntu-07i: Just use the ubuntu server installer. [21:07] xubuntu-07i: No need for weirdo 3rd party howtos. [21:07] ok yea i'll try that instead [21:07] :P [21:07] forgot about it [21:07] that'll work for GPT, EFI, the whole lot, right? [21:07] 5Sure. [21:08] Even without the 5. [21:08] lol [21:08] i like my weirdo how-tos [21:09] xubuntu-07i: also, if your /Home fills up, remember, you can also move files to / [21:09] you dont need LVM for that, or to resize ur partition [21:09] Moving files does not solve the problem of resizing. [21:09] right [21:09] it solves the problem of a full drive [21:09] there will be no /home2! [21:09] So can we finally end this pointless discussion bout using LVM? [21:09] i think so :D [21:10] Them/they/their want to use LVM, period. [21:10] i'm just tryin' to help a brother out, giving options :) [21:10] Thanks for that [21:10] Yea thanks everyone! [21:12] * Linus_ pats himself on the back for figuring out the password + keyfile trick, for /home [23:07] OK so I just used the default graphical installer. I don't have a /home partition but I can live with that :) [23:08] It's encrypted, and hibernate works, so I'm good [23:09] hey that rhymes (DoomBoom left the room) [23:16] But I forgot the dotfiles when I backed up, and that includes ~/.minecraft! I lost all my saves. [23:17] You don't have a/home partition? :-/ [23:18] If you mean you installed all in a single partition, you'll find a separate partition is more useful for backup or reinstall [23:21] I know, and for backup I usually do `cp -a` or `tar c` anyway, so it isn't necessary really unless I install another OS, which I don't plan on doing.