STORAGE

I recently upgraded from a SanDisk Extreme Plus 32 gig card (SE32G) to a SanDisk Ultra Plus (SL64G) which works perfectly in the Pi 2. Walmart has them for $28. While I was there I also grabbed a $9 SanDisk Cruiser USB 2.0 thumb drive for my top secret stuff.

Kernel 3.18 has the ability to read and write many file systems (like btrfs with -o compress) but my favorite for this application is the so-called "flash friendly" file system. sudo apt install f2fs-tools then mkfs.f2fs to prepare the thumb drive. After creating and mounting use Cryptkeeper to setup your folder. First run change your preferences from Gnome's "nautilus" file manager to XFCE's file manager "thunar". That's all you need to do. The F2 file system can't be read by any other operating system and even under Linux the encrypted directory is hidden. It's kind of hard to crack something that isn't there. :D

MORE FINAL ADVICE

If you're using Bluetooth audio like me you really should comment out the analog driver in /etc/modules to avoid application lockups. You can then fire up Quod Libet and start playing a file before turning on your Bluetooth speakers. A dummy output device is created and deleted and everything switches over perfectly. I assumed PulseAudio messed up ALSA but it's possible Debian did that all by themselves somewhere between 8.2 (9-11 Edition) and 8.4 (Murdock Edition). Maybe 8.6 will fix it, maybe not. I'll uncomment it someday and give it another try. For now I just don't need the trouble. Anyways..

If you're deploying more than one of these images on a network you should also change the computer name in /etc/hostname, near the top of /etc/hosts and in your Bluetooth device preferences. If you're using a wired connection change the static IP address in /etc/network/interfaces or configure the NIC to use DHCP. Type "man interfaces" for more info.