Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for building TAILS images with persistent mode #7

Open
hellais opened this issue Aug 20, 2013 · 2 comments
Open

Add support for building TAILS images with persistent mode #7

hellais opened this issue Aug 20, 2013 · 2 comments

Comments

@hellais
Copy link
Owner

hellais commented Aug 20, 2013

It is a desired feature to have the image creation process output a TAILS image with persistence mode.

I believe the best approach of achieving this would be as follows:

Format the drive with 2 partitions. The first one should be a FAT32 formatted partition that contains all the TAILS related stuff. The second partition should be ext4 formatted. It must be full disk encrypted and it will contains all of the users home.

The TAILS part of the image should be custom built as per #5 and it shall include a small script that at startup symlinks the users home to a directory stored on the encrypted partition.

@cryptomule
Copy link
Contributor

Upgradability:

Does this mean that the "TAILS-OSX" script will recognize the currently installed TAILS version (.2) on the USB key, so if the script is run after a complete setup for a second time, it will allow you to replace (.2) with (.21), while keeping your EXT4 partition intact? Just like how the script recognizes when the tails.iso is manually added to the /BOOT folder instead of going to the internet and fetching a copy...

Off topic but another quick question:

If this script was used and adapted for other less security conscious distributions, one's that required a lot of constant package updates, (ex. Kali Linux) could you create a persistent USB environment without having to create two partitions by...

  • Would I simply need to change "Line 7" of grub.cfg to "persistent" instead of "nopersistent"?

@cryptomule
Copy link
Contributor

Can you implement the suggestions of @qnrq in this post? http://grugq.tumblr.com/post/60464139008/alternative-truecrypt-implementations. cryptsetup + tomb

http://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/

You want to dd if= either /dev/random or /dev/urandom instead of /dev/zero as the guide says though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants