Talk:Fstab
With regards to the statement: "change the mount-options of the /etc/fstab entry from default to something like rw,user,suid,dev,exec,auto,users,async which is the equivalent of the options in default and also allows non-root mounts" and with reference to https://linux.die.net/man/8/mount :
defaults(NB: notdefault) equates to:rw,suid,dev,exec,auto,nouser,async,relatimeuser/users(NB: the latter includes the former) implies:noexec,nosuid,nodev- all of the above can overridden by explicitly setting options after using
defaults/user/users - specifying the
usersoption near the end of your option list 'undoes' thesuid,dev,execearlier in the list
So, a better suggestion for mount options might be just:
defaults,user
which evaluates to: rw,
suid,dev,exec,auto,nouser,async,relatime,user,noexec,nosuid,nodev
You may wish to use the more permissive users instead of user, depending on your requirements.
You may then wish to append some/all of the following, depending on your requirements: suid,dev,exec,nofail,nolock (look up what they mean before switching them on!)
Mounting encrypted partitions
Find below some slight modifications to the archwiki on mounting LUKS encrypted partitions at boot:
- Followed the wiki to create and format a Luks partition on the eMMC (or a location of your choice)
- Created a keyfile, saved it in the /root folder, modified file permissions, and added to a keyslot
- Added relevent entries to /etc/conf.d/dmcrypt for target/source/keyfile
- rc-update add dmcrypt boot
- Added relevent entries to /etc/fstab following the recommendations for user mounting privilages
- rc-update add localmount default
This successfully automounts the luks partition at boot. This can be used to setup the eMMC as a common encrypted /home partition, shared across multiple SD cards each with their own distribution installed.