My system is encrypted using Full Disk Encryption, i.e. everything except /boot is encrypted using dmcrypt/luks. I am concerned about [Cold Boot Attacks](https://en.wikipedia.org/wiki/Cold_boot_attack), where researchers [demonstrated](https://citp.princeton.edu/research/memory/), that content could be extracted for [about 5 minutes](https://citp.princeton.edu/research/memory/media/).

Can you please provide instructions on:

* how to trigger kexec into a new kernel at the very last steps of the shutdown/reboot process (to ensure clean dismount, to prevent file system corruption, to ensure the old kernel gets overwritten)
* how to create that kernel, which wipes all the ram

i.e. Can you explain please, how to do the same on Ubuntu?

How to detect the shutdown? How to start the RAM Wipe? The RAM should be wiped upon the user clicks "shutdown" or if he starts a "panic script".

Thanks for your efforts!

Prior work:

* [Tails RAM Wipe introduction](https://tails.boum.org/contribute/design/memory_erasure/)
* [Some more information about tails RAM Wipe implementation](http://tails.boum.org/forum/Ram_Wipe_Script/)
* [Liberte Linux RAM Wipe introduction](http://dee.su/liberte-security)
* [More implementation details about Liberte Linux RAM Wipe implementation](http://forum.dee.su/topic/stand-alone-implementation-of-your-ram-wipe-scripts)
* [memtest not deleting everything](https://tails.boum.org/bugs/sdmem_does_not_clear_all_memory/memtest86plus/)
* [Test if RAM Wipe is working](https://tails.boum.org/contribute/release_process/test/erase_memory_on_shutdown/)
* [Tails mailing list discussion](https://mailman.boum.org/pipermail/tails-dev/2011-December/000713.html)
* [Another Tails mailing list discussion](https://mailman.boum.org/pipermail/tails-dev/2011-December/000724.html)
* [Kernel bug report](https://bugzilla.kernel.org/show_bug.cgi?id=42630)

If you want to see the feature become reality, vote on Ubuntu Brainstorm!

<http://brainstorm.ubuntu.com/idea/30076/>