Save your Linux machine – Recovering your root password and more

Re:Save your Linux machine – Recovering your root password a... by johnchristopher on Friday May 01, 2020 @09:23AM (#23041723)

I am scared to use full disk encryption or $HOME encryption because of potential loss of speed, hardware failures because of fragmenting or SSD grinding, the inability to use file recovering tools and being locked out if anything goes wrong. I just read changing the password might lock me out if the key is encrypted (or something).

Any tips?

[ Parent | on HN ]

Re:Save your Linux machine – Recovering your root password a... by yrro on Friday May 01, 2020 @02:14PM (#23044891)

Run 'cryptsetup luksHeaderBackup' and store it in a safe place. If you manage to corrupt your LUKS header, you can restore it from the backup.

The master encryption key in the LUKS header is still encrypted by your passphrase, so don't use this as an alternative to remembering your passphrase!

[ Parent | on HN ]

Re:Save your Linux machine – Recovering your root password a... by organsnyder on Friday May 01, 2020 @09:53AM (#23041971)

Speed loss is unnoticeable with any recent hardware (less than a decade old) and typical workloads (even for developers).

If concerns about losing data are a roadblock, then you need a good backup strategy. You're already rolling the dice that you'll never have a hardware failure, human error, natural disaster, theft...

I can't speak to your SSD wear concern or potential issues during password changes.

[ Parent | on HN ]

Re:Save your Linux machine – Recovering your root password a... by boring_twenties on Saturday May 02, 2020 @02:16PM (#23053725)

There is no loss of speed on any CPU that supports AES instructions, which is pretty much any CPU released after 2010.

[ Parent | on HN ]