How to create fully encrypted live USB?

Forum Forums New users New Users and General Questions How to create fully encrypted live USB?

  • This topic has 4 replies, 3 voices, and was last updated Jun 29-8:41 pm by Xecure.
Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • #62514
    Anonymous

      Hi,

      I did install antiX on a USB 2.0 drive and unfortunately it’s awfully slow (probably due to USB bottleneck, as opposed to faster RAM), nothing like the liveUSB.
      However I can see no option to have a fully encrypted liveUSB, just persistance.

      Are there any solutions for a portable encrypted OS on USB?

      Thank you

      #62518
      Member
      Xecure
        Helpful
        Up
        0
        ::

        Use the Live USB maker to create an encrypted live USB.
        You can even load the antiX live system in RAM, and then use it to create the encrypted live USB with the exact same USB you used to boot the system.
        https://www.youtube.com/watch?v=sGVgGMhP1d4
        See minute 2:16. You will see that the live USB maker has an “Encrypt” option. Select it to create the live system with encryption.

        antiX Live system enthusiast.
        General Live Boot Parameters for antiX.

        #62519
        Member
        olsztyn
          Helpful
          Up
          0
          ::

          I did install antiX on a USB 2.0 drive and unfortunately it’s awfully slow (probably due to USB bottleneck, as opposed to faster RAM), nothing like the liveUSB.
          However I can see no option to have a fully encrypted liveUSB, just persistance.

          If you actually traditionally installed antiX on USB drive rather than created Live instance on that USB drive I am not entirely surprised it is slow. The reason for that (IMHO as user) is that installed antiX (as any other distro) does a lot of write operations to such USB 2.0.
          I have been always setting up USB 2.0 instances of antiX as Live. The huge difference from traditionally installed antiX (among other advantages) is that it is predominantly read, which is reasonably fast, with very few write operations (almost none according to my write monitor). It is write operations to USB 2.0, which are rather slower, but a lot depends on USB media from my experience.
          All my Live instances are on USB 2.0 sticks, mostly Sandisk Cruzer Fit. They are very fast in boot and operation. The only exception from these Cruzer media is in my case a PNY 16G stick, which is very, very slow. I practically do not use it. I had two of these PNY sticks and both exhibited such slow performance, so must be common for them.
          I have been running all my instances as Live, most of them encrypted.
          When you run Live-USB-Maker to create Live USB instance, check ‘Encrypted’ box. It will create Live encrypted.
          Regards.

          • This reply was modified 1 year, 10 months ago by olsztyn.

          Live antiX Boot Options (Previously posted by Xecure):
          https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parameters

          #62521
          Anonymous
            Helpful
            Up
            0
            ::

            Use the Live USB maker to create an encrypted live USB.
            You can even load the antiX live system in RAM, and then use it to create the encrypted live USB with the exact same USB you used to boot the system.
            https://www.youtube.com/watch?v=sGVgGMhP1d4
            See minute 2:16. You will see that the live USB maker has an “Encrypt” option. Select it to create the live system with encryption.

            I see, thank you. I did see that, but apparently doesn’t offer any control over encryption settings (apparently not even in the CLI version), hence I did a traditional installation on USB and it proved to be a silly idea.
            Do you have more details about which encryption settings does the liveusb encrypt setting use?
            Is it a fully encrypted partition or full disk?

            Thank you

            #62526
            Member
            Xecure
              Helpful
              Up
              0
              ::

              The live USB maker creates minimum 2 partitions:
              1. a FAT partition, where the efi and boot menus and options are.
              2. a (normally ext4) partition, which contains the antiX system. This is the partition that would get encrypted.
              3. a (optional) DATA partition, to use as a separate (no-encrypted) partition that can be used as USB storage.

              If you encrypted the whole drive you wouldn’t be able to access it at all (and not be able to boot to it on any system).

              If you click on the “Help” button you can read information about the program. For example:

              Encrypt allows the user to create a fully encrypted live-USB using LUKS encryption.

              So it is a LUKS encryption.

              antiX Live system enthusiast.
              General Live Boot Parameters for antiX.

            Viewing 5 posts - 1 through 5 (of 5 total)
            • You must be logged in to reply to this topic.