Re: how to get a full disk encryption running on Linux Mint 17

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Andreas,

the linux mint 17 installer can do this for you automatically. If you boot your system with the mint 17 live cd and then run the install program at some point it will ask you for disk encryption. You just have to tick the coressponding box [1] during the install process, probably as well as the "use lvm" box so that all volumes can be unlocked at once. I just did this a week ago.
I used to do this manually before but I do not remember the details on how to get the unlocking at boot time right..

[1] e.g.: http://cyberraiden.files.wordpress.com/2014/05/linux-mint-17-mate-screenshot-install-2.png

Cheers,
Benjamin



On 12 June 2014 13:42, Andreas <dm-crypt_mailing_list@xxxxxxxxxxx> wrote:
hello,

having used a Windows-based Truecrypt encryption with pre-boot-authentication for some years, I want to do the corresponding action under Linux. I am using Linux Mint 17 Cinnamon. The system has one harddisk.

I already found, read and unsuccessfully tried out
- http://blog.andreas-haerter.com/2011/06/18/ubuntu-full-disk-encryption-lvm-luks.sh
and
- http://community.linuxmint.com/tutorial/view/344

Both tutorials / scripts refer to older Linux versions.
Since I am new to Linux I do not know, what syntaxes may have changed.

I got things working so far, using a VirtualBox machine, (so Mint 17 x32 is used):
- 200 MB primary partition ext3 on /dev/sda1 (unencrypted) as /boot
- 9,81 GB crypt-luks on /dev/sda2 (as seen from GParted)

This configuration boots up GRUB, Mint's green/white dots start flashing.
Then I think a timeout appears - message reads:
"Gave up waiting for root device ...
ALERT /dev/mapper/ubuntu-root does not exist - dropping to a shell."

When I boot up from CD, start "Preferences - Disks"
I can use the built-in unlock feature and I see
 /dev/mapper/luks-0a410528-cde8-440c-891f-ef6068aad0b3   LVM2 Physical Volume (LVM2 001)
which consists of
/dev/ubuntu/swap (4.1 GB)
/dev/ubuntu/root (5.2 GB)
/dev/ubuntu/home (1.2 GB)

So, the partions exist and can be unlocked.

I also can mount e.g. /dev/ubuntu/root
Mounted at /media/mint/fc34585c-ca63-4b28-aaca-5a00f3776856

There is /etc/fstab present.
It reads
(...)
/dev/mapper/ubuntu-root /               ext4    errors=remount-ro 0       1
# /boot was on /dev/sda1 during installation
UUID=30b080b5-9b39-46c9-9b61-2320efde52dc /boot           ext3    defaults        0       2
/dev/mapper/ubuntu-home /home           ext4    defaults        0       2
/dev/mapper/ubuntu-swap none            swap    sw              0       0


There is a good deal accomplished on my way to a disk encryption, but some small problems still prevent it from running flawlessly.

I wish to have the system booting up and asking for the passphrase to unlock all three partitions at once.

Help would be appreciated.

regards,
Andreas




_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt


_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt

[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux