{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreifg2rspxtr2rufzacnhaztefbx2lcdsiudztiyd6cwzdqa7fdle54",
"uri": "at://did:plc:haakkg7y3xdghcdmprxeexso/app.bsky.feed.post/3ml2dh3j5qgo2"
},
"path": "/t/linux-veracrypt-hidden-os-alternitve/37407#post_8",
"publishedAt": "2026-05-04T18:20:30.000Z",
"site": "https://discuss.privacyguides.net",
"textContent": "I remember looking into this for additional safety at border crossings but a friend told me that this may be considered concealment and could be illegal (although no way the border grunts would realize this) and the setup looked complex so I decided against it.\n\nWhat I do currently is that I make an additional user using systemd-homed. I have basically a totally clean wiped account with username of my first name. I use SDDM as my login screen and make sure to choose a theme that supports not showing additional users so I have to type in my username every time. So what border control sees is a login screen with blank field for username and password. Once I am logged into the clean user, the only evidence the other user exists is an encrypted folder in /home. You can obscure this a little further by naming the private user something like “backup” so there’s a folder in /home called backup or something like that which is not especially suspicious. Again obviously they can look at /home and see this (not that they would or understand what that folder is) but that folder is locked and encrypted, so even if they force you to unlock your main LUKS partition and grab the password for that, your sensitive data is still within the other user in systemd-homed.\n\nIf you want to take this up a step further, systemd-homed allows you to port the home folder to different devices such as a USB drive or SD card. I’ve seen USB drives that are somewhat concealed like hidden in a pen, and other things that are kind of cool like a real coin that hides an SD card inside. So if you really wanted there to be no data on the laptop, you could just transfer out the systemd-homed user’s home to the concealed USB drive or card, and then transfer it back after getting over the border. That way even if the border control completely searches your computer there is no sensitive data there.\n\nI feel like this is a reasonable setup for me currently. For certain people their threat model probably involves having no electronic devices or drives and shipping them instead of using the cloud but that’s not me.",
"title": "Linux veracrypt hidden OS alternitve?"
}