<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Let me clear this: the perfect storm of hacks *and* lost/stolen
    devices with private patient information appears to have led to
    changes at our institution. I guess these got our IT and lawyers to
    get religion on data security. Obviously, encryption won't protect
    against hacking.<br>
    <br>
    That out of the way, nobody has encrypted linux machines?<br>
    <br>
    Engin<br>
    <br>
    <div class="moz-cite-prefix">On 12/12/13, 10:00 AM, Engin &Ouml;zkan
      wrote:<br>
    </div>
    <blockquote cite="mid:52A9DD9A.50109@stanford.edu" type="cite">
      <meta content="text/html; charset=ISO-8859-1"
        http-equiv="Content-Type">
      At the risk of hijacking the thread, is the other type of "safety"
      considered? Our university is cutting net access to unencrypted
      computers, after now-publicized hacks originating from a foreign
      country. They do not seem to understand or know solutions for
      encrypting linux machines (they are also banishing XP; all FPLCs
      may have to come offline!).<br>
      <br>
      So, to cut to the chase, does anyone run RHEL/CentOS/Scientific
      Linux on encrypted disks? I am assuming dm-crypt with LUKS would
      be the way to go, and I would appreciate to hear about how easy it
      is to set it up and maintain. Can this be done without wiping
      clean the system? We are not system admins, and don't want to be.
      Otherwise, we may be forced to switch entirely to Macs (a Mac OS X
      Server as our SBGrid server?).<br>
      <br>
      Thanks,<br>
      Engin<br>
      <br>
      <div class="moz-cite-prefix">On 12/12/13, 8:32 AM, David Waterman
        wrote:<br>
      </div>
      <blockquote
cite="mid:CAELX-2SALzN4fv--3ejrxutrTJNyyao96oj808H4JaW07M6rfw@mail.gmail.com"
        type="cite">
        <div dir="ltr">CCP4 builds and tests on a handful of Linux
          distributions, but the distributed binaries are, I think,
          built on CentOS 5.9. I agree that RHEL derivatives are
          "safest" for a crystallography platform.<br>
          <div class="gmail_extra"><br clear="all">
            <div>-- David<br>
            </div>
            <br>
            <br>
            <div class="gmail_quote">On 11 December 2013 23:15,
              Nathaniel Echols <span dir="ltr">&lt;<a
                  moz-do-not-send="true" href="mailto:nechols@lbl.gov"
                  target="_blank">nechols@lbl.gov</a>&gt;</span> wrote:<br>
              <blockquote class="gmail_quote" style="margin:0 0 0
                .8ex;border-left:1px #ccc solid;padding-left:1ex">
                <div dir="ltr">
                  <div class="im">On Wed, Dec 11, 2013 at 2:24 PM,
                    Andreas F&ouml;rster <span dir="ltr">&lt;<a
                        moz-do-not-send="true"
                        href="mailto:docandreas@gmail.com"
                        target="_blank">docandreas@gmail.com</a>&gt;</span>
                    wrote:<br>
                  </div>
                  <div class="gmail_extra">
                    <div class="gmail_quote">
                      <div class="im">
                        <blockquote class="gmail_quote" style="margin:0
                          0 0 .8ex;border-left:1px #ccc
                          solid;padding-left:1ex">Everyone has a
                          favorite distro, and they all work</blockquote>
                        <div><br>
                        </div>
                      </div>
                      <div>I'm not sure about this - we have definitely
                        found some distributions to be easier to support
                        than others, even just compiling Phenix from
                        source. &nbsp;My advice would be to stick to
                        distributions derived from RedHat (i.e. Fedora,
                        RHEL, CentOS, Scientific Linux) or Ubuntu,
                        simply because we will go out of our way to
                        ensure that the binary Phenix installers work on
                        these. &nbsp;(They also have Coot binaries.) &nbsp;That
                        doesn't mean other distributions are necessarily
                        unsuitable, but the software support may be
                        patchier.</div>
                      <div><br>
                      </div>
                      <div>I can't remember what CCP4 builds on, but I
                        would be surprised if it doesn't support at
                        least the same OSes.</div>
                      <div><br>
                      </div>
                      <div>-Nat</div>
                    </div>
                  </div>
                </div>
                <br>
                _______________________________________________<br>
                phenixbb mailing list<br>
                <a moz-do-not-send="true"
                  href="mailto:phenixbb@phenix-online.org">phenixbb@phenix-online.org</a><br>
                <a moz-do-not-send="true"
                  href="http://phenix-online.org/mailman/listinfo/phenixbb"
                  target="_blank">http://phenix-online.org/mailman/listinfo/phenixbb</a><br>
                <br>
              </blockquote>
            </div>
            <br>
          </div>
        </div>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <pre wrap="">_______________________________________________
phenixbb mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:phenixbb@phenix-online.org">phenixbb@phenix-online.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://phenix-online.org/mailman/listinfo/phenixbb">http://phenix-online.org/mailman/listinfo/phenixbb</a>
</pre>
      </blockquote>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
phenixbb mailing list
<a class="moz-txt-link-abbreviated" href="mailto:phenixbb@phenix-online.org">phenixbb@phenix-online.org</a>
<a class="moz-txt-link-freetext" href="http://phenix-online.org/mailman/listinfo/phenixbb">http://phenix-online.org/mailman/listinfo/phenixbb</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>