Comments on: Installing Ubuntu 8.04 with full disk encryption http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/ Amateur fiddling with GNU/Linux and everything that runs on top of it (Windows, too ;)) Tue, 09 Mar 2010 13:04:55 +0000 http://wordpress.com/ hourly 1 By: yungchin http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-768 yungchin Tue, 09 Mar 2010 13:04:55 +0000 http://learninginlinux.wordpress.com/?p=38#comment-768 Thanks, both for the question and the answer! So I guess this means you need to remember to mount the USB-stick partition whenever there are kernel or grub updates, but otherwise you can leave the stick out during use? Thanks, both for the question and the answer! So I guess this means you need to remember to mount the USB-stick partition whenever there are kernel or grub updates, but otherwise you can leave the stick out during use?

]]> By: Tim McCormack http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-767 Tim McCormack Mon, 08 Mar 2010 16:11:19 +0000 http://learninginlinux.wordpress.com/?p=38#comment-767 I seem to have answered my own question! The trick is to select the USB drive's partition to be mounted as /boot, and the installer will put GRUB on that drive. I seem to have answered my own question! The trick is to select the USB drive’s partition to be mounted as /boot, and the installer will put GRUB on that drive.

]]> By: Secure Linux system? - HEXUS.community discussion forums http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-766 Secure Linux system? - HEXUS.community discussion forums Sat, 06 Mar 2010 12:06:19 +0000 http://learninginlinux.wordpress.com/?p=38#comment-766 [...] most modern distros incorporate LUKS/dm-crypt out-of-the-box - there's a Ubuntu 8.04 walkthrough here (note that you'll need the "alternate" install disc). It doesn't look too complicated, [...] [...] most modern distros incorporate LUKS/dm-crypt out-of-the-box – there's a Ubuntu 8.04 walkthrough here (note that you'll need the "alternate" install disc). It doesn't look too complicated, [...]

]]> By: Tim McCormack http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-765 Tim McCormack Tue, 02 Mar 2010 16:18:07 +0000 http://learninginlinux.wordpress.com/?p=38#comment-765 What if I wanted to boot the system from USB key? I don't like the idea of having an unencrypted boot partition sitting around on my hard disk. Is there a way I could have GRUB and whatever else is needed to open LUKS/LVM on the key, and chain to the OS inside the LVM? What if I wanted to boot the system from USB key? I don’t like the idea of having an unencrypted boot partition sitting around on my hard disk. Is there a way I could have GRUB and whatever else is needed to open LUKS/LVM on the key, and chain to the OS inside the LVM?

]]> By: scar http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-763 scar Sun, 31 Jan 2010 19:00:14 +0000 http://learninginlinux.wordpress.com/?p=38#comment-763 awesome! thanks. i installed system-config-lvm package. it was extremely easy to use. awesome! thanks. i installed system-config-lvm package. it was extremely easy to use.

]]> By: yungchin http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-762 yungchin Sun, 31 Jan 2010 00:23:16 +0000 http://learninginlinux.wordpress.com/?p=38#comment-762 Hi, cool that you're back! Here's the disk layout of the above described in LVM-speak: * your encrypted partition serves as the Physical Volume * there's one Volume Group, and it only has that one PV * your Logical Volumes are in that VG - so currently you have a LV for the system root and another one for swap Adding new LVs can be done with lvcreate. There's apparently also a gui to configure those things: http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Deployment_Guide/s1-system-config-lvm.html - I've never used it though. Hope that clears it up! Hi, cool that you’re back!

Here’s the disk layout of the above described in LVM-speak:

* your encrypted partition serves as the Physical Volume
* there’s one Volume Group, and it only has that one PV
* your Logical Volumes are in that VG – so currently you have a LV for the system root and another one for swap

Adding new LVs can be done with lvcreate. There’s apparently also a gui to configure those things: http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Deployment_Guide/s1-system-config-lvm.html – I’ve never used it though.

Hope that clears it up!

]]> By: scar http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-761 scar Sat, 30 Jan 2010 00:13:47 +0000 http://learninginlinux.wordpress.com/?p=38#comment-761 hi, i followed this guide quite some time ago, i see my comments are still here ;) i am now running 9.04 through upgrading and i haven't had any problems at all. i come to you today because i do not quite still understand how i partitioned my disk, and i would like to allocate a new partition so i can put a virtual machine's disk image there. i have a 300 GB disk, and i mostly followed your instructions. i allocated about 100MB to /boot, and the rest was allocated to an encrypted partition, inside of which is a 20 GB / (root) partition and a 4 GB swap partition, leaving approximately 270 GB of unused space inside the encrypted partition as far as i know. now i would like to just create another 10 GB partition to store a virtual machine disk image on, and i cannot figure out how to do that, with all of the pv* and lv* commands. can you help me understand the disk layout i have created and how to manage/create/delete additional partitions, should i need them? thanks hi, i followed this guide quite some time ago, i see my comments are still here ;) i am now running 9.04 through upgrading and i haven’t had any problems at all.

i come to you today because i do not quite still understand how i partitioned my disk, and i would like to allocate a new partition so i can put a virtual machine’s disk image there.

i have a 300 GB disk, and i mostly followed your instructions. i allocated about 100MB to /boot, and the rest was allocated to an encrypted partition, inside of which is a 20 GB / (root) partition and a 4 GB swap partition, leaving approximately 270 GB of unused space inside the encrypted partition as far as i know.

now i would like to just create another 10 GB partition to store a virtual machine disk image on, and i cannot figure out how to do that, with all of the pv* and lv* commands.

can you help me understand the disk layout i have created and how to manage/create/delete additional partitions, should i need them? thanks

]]> By: Wolfgang http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-760 Wolfgang Thu, 28 Jan 2010 08:49:45 +0000 http://learninginlinux.wordpress.com/?p=38#comment-760 Thanks! I will try that. Thanks! I will try that.

]]> By: yungchin http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-759 yungchin Wed, 27 Jan 2010 22:31:00 +0000 http://learninginlinux.wordpress.com/?p=38#comment-759 Hi, thanks! One thing you could do is unlocking the fat partition using a keyfile. If you make sure the system-root is unlocked and mounted before that, then you can safely store the keyfile on there. I'm a bit rusty on the details (I haven't changed anything to my machine in ages), so you're best off checking the crypttab manpage for how to configure this. Hope that's a good starting point, have fun! Hi, thanks!

One thing you could do is unlocking the fat partition using a keyfile. If you make sure the system-root is unlocked and mounted before that, then you can safely store the keyfile on there. I’m a bit rusty on the details (I haven’t changed anything to my machine in ages), so you’re best off checking the crypttab manpage for how to configure this.

Hope that’s a good starting point, have fun!

]]> By: Wolfgang http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/#comment-758 Wolfgang Wed, 27 Jan 2010 21:33:21 +0000 http://learninginlinux.wordpress.com/?p=38#comment-758 Hi Yungchin, Thank you very much for your good work! It worked like a charm. But I have one question left. I created two partitions. The first one contains systemroot and swap as logical Volumes of the lvm setup. The second one is a partition formatted with fat32. Both partitions have the same passphrase. When I boot, I am asked for the passphrase twice. I want to avoid that. But I don't know how to go about it. Do you have any idea? (I hope the answer is not here before my eyes and I did not see it ;-)) Thank you! Hi Yungchin,
Thank you very much for your good work! It worked like a charm.

But I have one question left. I created two partitions. The first one contains systemroot and swap as logical Volumes of the lvm setup. The second one is a partition formatted with fat32. Both partitions have the same passphrase.

When I boot, I am asked for the passphrase twice. I want to avoid that. But I don’t know how to go about it. Do you have any idea? (I hope the answer is not here before my eyes and I did not see it ;-))

Thank you!

]]>