how to get a full disk encryption running on Linux Mint 17

hello,

having used a Windows-based Truecrypt encryption with pre-boot-authentication for some years, I want to do the corresponding action under Linux. I am using Linux Mint 17 Cinnamon. The system has one harddisk.

I already found, read and unsuccessfully tried out

-
http://blog.andreas-haerter.com/2011/06/18/ubuntu-full-disk-encryption-lvm-luks.sh
and
- http://community.linuxmint.com/tutorial/view/344

Both tutorials / scripts refer to older Linux versions. Since I am new to Linux I do not know, what syntaxes may have changed.

I got things working so far, using a VirtualBox machine, (so Mint 17 x32 is used):

- 200 MB primary partition ext3 on /dev/sda1 (unencrypted) as /boot
- 9,81 GB crypt-luks on /dev/sda2 (as seen from GParted)

This configuration boots up GRUB, Mint's green/white dots start flashing. Then I think a timeout appears - message reads:

"Gave up waiting for root device ...
ALERT /dev/mapper/ubuntu-root does not exist - dropping to a shell."

When I boot up from CD, start "Preferences - Disks" I can use the built-in unlock feature and I see

/dev/mapper/luks-0a410528-cde8-440c-891f-ef6068aad0b3 LVM2 Physical
Volume (LVM2 001)
which consists of

/dev/ubuntu/swap (4.1 GB)
/dev/ubuntu/root (5.2 GB)
/dev/ubuntu/home (1.2 GB)

So, the partions exist and can be unlocked.

I also can mount e.g. /dev/ubuntu/root
Mounted at /media/mint/fc34585c-ca63-4b28-aaca-5a00f3776856

There is /etc/fstab present.
It reads

(...)
/dev/mapper/ubuntu-root / ext4 errors=remount-ro 0 1

# /boot was on /dev/sda1 during installation
UUID=30b080b5-9b39-46c9-9b61-2320efde52dc /boot           ext3
defaults        0       2
/dev/mapper/ubuntu-home /home           ext4    defaults        0       2
/dev/mapper/ubuntu-swap none            swap    sw              0       0

There is a good deal accomplished on my way to a disk encryption, but some small problems still prevent it from running flawlessly.

I wish to have the system booting up and asking for the passphrase to unlock all three partitions at once.

Help would be appreciated.

regards,
Andreas

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

Hi Andreas,

the linux mint 17 installer can do this for you automatically. If you boot your system with the mint 17 live cd and then run the install program at some point it will ask you for disk encryption. You just have to tick the coressponding box [1] during the install process, probably as well as the "use lvm" box so that all volumes can be unlocked at once. I just did this a week ago.
I used to do this manually before but I do not remember the details on how to get the unlocking at boot time right..

[1] e.g.:
http://cyberraiden.files.wordpress.com/2014/05/linux-mint-17-mate-screenshot-install-2.png

Cheers,
Benjamin

_______________________________________________
dm-crypt mailing list
[email protected] <mailto:[email protected]>
http://www.saout.de/mailman/listinfo/dm-crypt

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

Hi Benjamin, hi Jonas,

thanks for the warm welcome.

I didn't try do set up encryption in Mint using its own installer. But you are right, Mint 17 is able to handle this.

So, also thanks for this hint.

The file cryptsetup/README, that you gave me the link to, is also helpful. But most of the Linux commands are completely new to me, so it takes some time to understand everything.

regards
Andreas

Am 12.06.2014 14:11, schrieb Benjamin Eberhardt:

Quoted 29 lines

Hi Andreas,

the linux mint 17 installer can do this for you automatically. If you boot your system with the mint 17 live cd and then run the install program at some point it will ask you for disk encryption. You just have to tick the coressponding box [1] during the install process, probably as well as the "use lvm" box so that all volumes can be unlocked at once. I just did this a week ago.
I used to do this manually before but I do not remember the details on how to get the unlocking at boot time right..

[1] e.g.:
http://cyberraiden.files.wordpress.com/2014/05/linux-mint-17-mate-screenshot-install-2.png

Cheers,
Benjamin

_______________________________________________
dm-crypt mailing list
[email protected] <mailto:[email protected]>
http://www.saout.de/mailman/listinfo/dm-crypt

Quoted 4 lines

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

_______________________________________________
dm-crypt mailing list
[email protected]
http://www.saout.de/mailman/listinfo/dm-crypt

having used a Windows-based Truecrypt encryption with pre-boot-authentication for some years, I want to do the corresponding action under Linux. I am using Linux Mint 17 Cinnamon. The system has one harddisk.

I got things working so far, using a VirtualBox machine, (so Mint 17 x32 is used):

- 200 MB primary partition ext3 on /dev/sda1 (unencrypted) as /boot
- 9,81 GB crypt-luks on /dev/sda2 (as seen from GParted)

This configuration boots up GRUB, Mint's green/white dots start flashing. Then I think a timeout appears - message reads:

"Gave up waiting for root device ...
ALERT /dev/mapper/ubuntu-root does not exist - dropping to a shell."

When I boot up from CD, start "Preferences - Disks" [...]
So, the partions exist and can be unlocked.