Menu

Truecrypt+Clonezilla in harmony

Dave
2012-10-23
2013-04-05
  • Dave

    Dave - 2012-10-23

    Hi All,

    Just thought I would outline how I am using win7, Truecrypt and Clonezilla.

    I originally wanted to use a Truecrypt encrypted Target drive but because Clonezilla cannot launch Truecrypt to mount the drive, I found I needed to first save the image to an unencrypted drive and then after using Clonezilla, copy the image Folder and files across to the encrypted drive. The I would have to wipe the unencrypted drive and overall this was taking about 6-hours in total.

    As well as making an image, when I do a backup, I also backup some Folders that contain current data like my emails etc in case I need ready access to them. This got complicated using Truecrypt encrypted drives, so here's the final working solution and it may help others to do something similar.

    I have my win7 System partition encrypted with Truecrypt which requires pre-boot authorization. I did NOT encrypt the entire System drive, just the win7 Partition as advised by the Truecrypt Help system.

    I have an unencrypted USB-Target drive with a single 20G Truecrypt container on it for the current data Folders, but the remainder of the drive is unencrypted.

    I start the backup process by mounting the Truecrypt container and using Windows Explorer to drag the current Folders (emails etc) to the mounted container. You could also use a backup program to do that.

    I dismount the Truecrypt container and shut down the win7 PC.

    I then boot the Clonezilla CD and make an image in the unencrypted portion of the backup Target drive.

    Storing the image information on an unencrypted drive is not a problem as the image, if it was restored by someone else, would be restored with the win7 Partition encrypted so it is already protected even though the image itself is not.

    Until Steven (Clonezilla Guru) incorporates Truecrypt into the Clonezilla environment, this is about as simple and yet effective as I can get it to be.

    It is still 100% secure and no longer needs copying from unencrypted to encrypted drives.

     
  • Steven Shiau

    Steven Shiau - 2012-11-01

    Thanks for sharing this.
    BTW, in Clonezilla live 2.0.0-34, a package called "tcplay" was added. Therefore you can use that to mount a truecrypt partition or file. E.g. a file was encrypted as /tmp/tc on /dev/sda2:
    mount /dev/sda2 /mnt/
    losetup /dev/loop1 /mnt/tmp/tc
    tcplay -map=secv -device=/dev/loop1
    mount /dev/mapper/secv /home/partimag/

    Steven.

     

Log in to post a comment.