install-guide/devel/en_US diskpartitioning.xml,1.21,1.22
Paul W. Frields (pfrields)
fedora-docs-commits at redhat.com
Mon May 12 02:01:26 UTC 2008
Author: pfrields
Update of /cvs/docs/install-guide/devel/en_US
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv6410
Modified Files:
diskpartitioning.xml
Log Message:
Make some changes to support encryption and resizing functions
Index: diskpartitioning.xml
===================================================================
RCS file: /cvs/docs/install-guide/devel/en_US/diskpartitioning.xml,v
retrieving revision 1.21
retrieving revision 1.22
diff -u -r1.21 -r1.22
--- diskpartitioning.xml 10 May 2008 14:40:04 -0000 1.21
+++ diskpartitioning.xml 12 May 2008 02:01:24 -0000 1.22
@@ -363,6 +363,48 @@
</note>
</section>
+ <section id="sn-understanding-encryption">
+ <title>Understanding Encryption</title>
+ <para>
+ &DISTRO; includes functions to encrypt your storage. You may find
+ this function useful if you have a laptop or if you worry about
+ your disk storage falling out of your control. This disk
+ encryption requires you to provide an additional passphrase at
+ boot time or whenever you first access the disk storage.
+ </para>
+ <para>
+ You may choose to encrypt either all partitions, or only selected
+ ones. A typical use case includes encrypting partitions
+ containing <filename class="directory">/home</filename>, <filename
+ class="directory">/var</filename>, and <filename
+ class="directory">/tmp</filename>, along with the swap partition.
+ There is usually no need to encrypt <filename
+ class="directory">/usr</filename>, since this directory usually
+ contains only system executables and libraries that have no
+ intrinsic privacy value. The <filename
+ class="partition">/boot</filename> partition is never encrypted
+ and should not be used for sensitive data.
+ </para>
+ <note>
+ <title>Encrypted Storage Performance</title>
+ <para>
+ Storage encryption creates a slight performance decrease. You
+ may wish to weigh this drawback against the benefits of security
+ and privacy that encryption provides.
+ </para>
+ </note>
+ <para>
+ To make the encryption effective, choose a good passphrase. You
+ can find more information about good passphrases in <xref
+ linkend="ch-rootpassword"/>.
+ </para>
+ <para>
+ The encryption provided uses the Linux Unified Key System
+ (<acronym>LUKS</acronym>) for encryption. For more information on
+ LUKS, refer to <ulink url="http://luks.endorphin.org/"/>.
+ </para>
+ </section>
+
<section id="sn-partitioning-advice">
<title>Advice on Partitions</title>
<para>Optimal partition setup depends on the usage for the Linux
@@ -553,7 +595,6 @@
</para>
</listitem>
</varlistentry>
-
<varlistentry>
<term><guilabel>Create custom layout</guilabel></term>
<listitem>
@@ -567,6 +608,11 @@
</varlistentry>
</variablelist>
<para>
+ Select <guilabel>Encrypt system</guilabel> to encrypt all
+ partitions except the <filename class="partition">/boot</filename>
+ partition.
+ </para>
+ <para>
Select <guilabel>Review and modify partitioning layout</guilabel>
to customize the set of partitions that &DISTRO; creates, to
configure your system to use drives in RAID arrays, or to modify
@@ -600,10 +646,10 @@
</para>
<para>
If you do not select an option to customize the partition layout,
- proceed to <xref linkend="ch-bootloader"/>. If you choose
+ proceed to <xref linkend="sn-disk-changes"/>. If you choose
<guilabel>Create custom layout</guilabel> or <guilabel>Review and
modify partitioning layout</guilabel>, proceed to <xref
- linkend="sn-partitioning-general"/>.
+ linkend="sn-disk-druid"/>.
</para>
</section>
@@ -651,12 +697,13 @@
Select this option to add a partition
<indexterm>
<primary>partition</primary>
- <secondary>adding</secondary>
- </indexterm> or LVM physical volume to the disk. In the
- <guilabel>Add partition</guilabel> dialog, choose a mount
- point and a partition type. If you have more than one disk
- on the system, choose which disks the partition may inhabit.
- Indicate a size in megabytes for the partition.
+ <secondary>adding</secondary> </indexterm> or LVM physical
+ volume to the disk. In the <guilabel>Add
+ partition</guilabel> dialog, choose a mount point and a
+ partition type. If you have more than one disk on the
+ system, choose which disks the partition may inhabit.
+ Indicate a size in megabytes for the partition. If you
+ wish to encrypt the partition, select that option.
</para>
<important>
<title>Illegal Partitions</title>
@@ -727,9 +774,16 @@
this effect, not an error or bug.
</para>
</note>
+ <para>
+ Select the <guilabel>Encrypt partition</guilabel> option to
+ encrypt all information on the disk partition.
+ </para>
<para>
After you enter the details for your partition, select
- <guibutton>OK</guibutton> to continue.
+ <guibutton>OK</guibutton> to continue. If you chose to
+ encrypt the partition, the installer prompts you to assign a
+ passphrase by typing it twice. For hints on using good
+ passphrases, refer to <xref linkend="ch-rootpassword"/>.
</para>
</listitem>
</varlistentry>
@@ -777,10 +831,17 @@
those used on some Windows operating systems
</para>
</listitem>
+ <listitem>
+ <para>
+ resize an existing <systemitem
+ class="filesystem">NTFS</systemitem>, <systemitem
+ class="filesystem">ext2</systemitem>, or <systemitem
+ class="filesystem">ext3</systemitem> partition
+ </para>
+ </listitem>
</itemizedlist>
<note>
<title>Windows Partitions</title>
-
<para>
You may not label Windows partitions that use the
<indexterm>
@@ -979,6 +1040,21 @@
installation process.
</para>
</section>
+
+ <section id="sn-disk-changes">
+ <title>Making Disk Changes</title>
+ <para>
+ To proceed, the installer makes important changes to the disk
+ configuration. This is the last point at which you can quit the
+ installer and still retain your original system configuration. If
+ you have chosen to resize existing Windows NTFS partitions without
+ erasing or formatting them, the data in those partitions is
+ retained.
+ </para>
+ <para>
+ Select <guilabel>Write changes to disk</guilabel> to proceed.
+ </para>
+ </section>
</chapter>
<!--
More information about the Fedora-docs-commits
mailing list