I needed some new hardware to keep my appointments sorted, my address-database, and things like that, and I wanted those things encrypted. Instead of opting for some smartphone or PDA-type hardware, I decided on the Asus EeePC subnotebook, which costs about the same, or even less than modern smartphones or PDAs. <\/p>\n
I got mine from digitec, a german edition, since it wasn’t available in switzerland yet. After playing a bit with the installed Xandros I decided to install Debian, since I found I was lacking packages, and I wanted to encrypt \/home anyway. I decided not to change the partition-tables, and to put Debian on \/dev\/sda1 solely. In xandros, the system was on \/dev\/sda1, mounted read-only, and \/dev\/sda2 was a union-mount onto it. In hindsight, this wasn’t a bad choice, I really needed the 2.5GB to compile kernels.. <\/p>\n
I installed pretty much according to the DebianEeePC Howto<\/a> and then started compiling my own kernels. You need the AR2425-patch, and the 2.6.24-patch from here: http:\/\/madwifi.org\/ticket\/1679<\/a> in order to get the wireless working. Then you’ll probably also want a driver for the ATL2-ethernet-NIC<\/a>, version 2.0.4 works with 2.6.24.X-kernels. Sadly, the ATL2 only works when loaded as module. And for the special buttons to work, you’ll want to apt-get install eeepc_acpi. Well anyway, what you’ll want is my .config for Asus EeePC<\/a>.<\/p>\n The xandros on the eeepc boots tremendously fast, most of which can be traced back to their fastinit-initd, which has been reverse-engineered, by the way: fastinit reimplementation<\/a>. A short look at this and “strings \/sbin\/fastinit” reveals that it only does the minimun, and starts X as user “user” with just a login shell. Sadly, this does not work if you’re going to encrypt \/home with dm-crypt. After looking at some alternatives, I settled on KDM with a pleasant looking-theme on my own, based on Kurumin KDM1<\/a> (without girl and swirl). <\/p>\n The login uses pam-mount to automatically do cryptsetup luksOpen for \/home. \/etc\/security\/pam_mount.conf.xml needed to get this line added: I had made a backup-copy of the whole flash with dd and nc over the network, so I could just re-use some configfiles such as xorg-conf. <\/p>\n Other noteable specialities are some defaults which make more sense for flash-based systems, like mounting filesystems with noatime. This is my fstab: As for the window manager, I tried out several environments. icewm (was used on xandros), fluxbox, openbox, matchbox and finally xfce4. I’m still not quite satisfied with it. <\/p>\n","protected":false},"excerpt":{"rendered":" I needed some new hardware to keep my appointments sorted, my address-database, and things like that, and I wanted those things encrypted. Instead of opting for some smartphone or PDA-type hardware, I decided on the Asus EeePC subnotebook, which costs about the same, or even less than modern smartphones or PDAs. I got mine from […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-32","post","type-post","status-publish","format-standard","hentry","category-computers"],"_links":{"self":[{"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/posts\/32","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/comments?post=32"}],"version-history":[{"count":3,"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/posts\/32\/revisions"}],"predecessor-version":[{"id":1188,"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/posts\/32\/revisions\/1188"}],"wp:attachment":[{"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/media?parent=32"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/categories?post=32"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/seegras.discordia.ch\/Blog\/wp-json\/wp\/v2\/tags?post=32"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n<volume fstype=\"crypt\" path=\"\/dev\/sda2\" mountpoint=\"\/home\" \/><\/code>
\nand \/etc\/pam.d\/kdm and \/etc\/pam.d\/login each got the line
\n@include common-pammount<\/code>
\nattached at the end. <\/p>\n
\nproc \/proc proc defaults 0 0
\n\/dev\/sda1 \/ ext3 noatime,nodiratime,user_xattr,errors=remount-ro 0 1
\ntmpfs \/var\/log tmpfs defaults 0 0
\ntmpfs \/tmp tmpfs defaults 0 0
\ntmpfs \/var\/tmp tmpfs defaults 0 0<\/code><\/p>\n