This is a problem that gets reported regularly. I have received an email from mike:
When run dunfell on usb, it always ask for password before boot on any further, this is great as expected; thanks!
however, if dunfell installed on harddrive, the first re-boot, it did not even ask for password (even though I did setup passwod at the beginning). Without asking for password, it just went on to boot on, left me wondering where is the security?
is this normal? or bug?
My reply to mike:
mike,
Yeah, you will have to uninstall EasyOS from the hard drive and start
again. Well, no, actually, just delete everything under
/mnt/${WKG_DEV}/${WKG_DIR}
...there is also .session hidden folder, that must also be deleted.
The filesystem in the hard drive partition must be ext4 and must have
its "encrypt" flag enabled. Do, that, and when you first bootup, Easy
will see that the partition has the encrypt flag enabled and will ask
for a password.
This is how you enable encryption, unmount the partition, then in a terminal, type this,
substitute whatever the partition is:
Code: Select all
# tune2fs -O encrypt,^has_journal /dev/${WKG_DEV}
...that is a letter capital "O". This is also mentioned here:
https://easyos.org/install/how-to-insta ... drive.html
Extra notes:
You can check if a partition has encrypt enabled by doing this, on my PC looking at sda8:
Code: Select all
# tune2fs -l /dev/sda8 | grep 'Filesystem features'
Filesystem features: ext_attr resize_inode dir_index filetype extent 64bit flex_bg encrypt sparse_super large_file huge_file dir_nlink extra_isize metadata_csum
