How should I do it if I want to…

  • Format external SSD to use with linux
  • Full drive encryption
  • Compatible with windows (temporarily)
  • Preferably do it with KDE GUI

Context: A linux noob. I got a new laptop earlier this year and uses it mainly for tinkering/playing with linux, get competent with it before dropping windows completely on my main desktop. There is a lot of stuff I want to move back and forth between those machines during this learning period.

My idea is to use an external SSD which when I’m done with windows, I can still use it to store work files or any sensitive stuff, so it will need encryption.

Saw a reddit thread saying I still need veracrypt, which I’m totally ok with on windows side but I prefer keeping everything simple on linux side (I only know it can be done without any extra package)

Extra question:
I can possibly store all works and sensitive data on encrypt external and leave root drive unencrypted. In that case, which file system should I use on which drive? Does it matter?

Thank you in advance.

  • g6d3np81@kbin.socialOP
    3·
    1 year ago
    Linux Windows Preparation
    LUKS LUKS no can do / unless WSL
    LUKS ??? cryptsetup
    LUKS VeraCrypt ???
    VeraCrypt VeraCrypt VeraCrypt GUI from either
    ??? BitLocker Format with NTFS in Windows

    I’m still a bit confused with veracrypt… The docs make it sounds like vc use its own format.
    Can the drive be prepared with LUKS and then decrypt in windows with veracrypt? If not, I might just use bitlocker until I drop windows.

    • BuckShot@beehaw.org
      4·
      1 year ago

      If things are still the same from ~ June of 2022 then you have a choice between none, Linux Ext2, Linux Ext3, Linux Ext4, and NTFS.

      Edit: VeraCrypt utilizes a unique encryption process. Its easy as you just move the mouse around like you went mad, but this produces a highly secure encryption key too. As long as your distro works with NTFS then it seems VeraCrypt can assist to help you encrypt. Otherwise, when Windows is a VM it only can do what Linux allows it to do lol

      • g6d3np81@kbin.socialOP
        1·
        1 year ago

        I try not to mess with my my current windows desktop setup too much if I don’t have to (mission critical). It’s not on VM.
        Would love to do it with LUKS/EXT4 if possible but it’s not supported on windows (am I correct?)

        If I use VC then I have to install it on both win and linux and also any additional machine I intend to decrypt with, that’s quite unwieldy compare to LUKS. I also have lobotomized my current install to cripple spying and broke it to the point it can not update to support wsl.

        Seems like bitlocker is a proper solution for the moment. Or just do two partitions (maybe two drives), encrypt one with LUKS, wipe everything unencrypted when done using it.

        • BuckShot@beehaw.org
          3·
          1 year ago

          It’s quite an easy program to install and it’s also cross platform. The fact drives need the softwarenon aNY PC trying to gain access seems like a feature to me. Maybe if you wanted to copy something from the encrypted drive to a friends computer, only then would it be somewhat of a nuisance. But this all ties into me recommending to leave some portion of the hard drive alone. You’d be able to access anything not in VC’s space anywhere, while it’s also a breeze to download and install VC too.

    • QuazarOmega@lemy.lol
      2·
      1 year ago

      Just a note: you can open Bitlocker encrypted drives on Linux, some distros (e.g. Mint and Fedora) have support for it out of the box that works via GUI file manager, I think it uses Dislocker under the hood