How do I install Raring in an encrypted disk?
There's no alternate CD and on regular raring CD there is no option to mount the existing encrypted partitions!
Ubuntu – How to install on an encrypted disk now that there is no alternate CD
encryptioninstallation
Related Solutions
- Go to releases.ubuntu.com/11.04 and download the alternate install CD for your architecture.
- Burn the .iso to a blank CD.
- Reboot with the CD in the drive, and allow the computer to boot from the CD.
- On the Ubuntu alternate CD's menu, select "Install":
- Follow the installer's instructions until you get to the step entitled "Partition Disks".
- Choose "Guided - use entire disk and set up encrypted LVM" from the menu.
- Finish the installation by following the instructions on the screen.
Using the Disks application:
In Ubuntu 18.04 or newer there is the possibility of using (Gnome) Disks. Thanks for the hint, Greg Lever, after clicking around I found what Greg mentioned:
1. Open Gnome Disks.
2. Choose/Click on the main physical hard drive in the left panel.
3. Click on the LUKS encrypted partition, in this example it is Partition 3:
4. Click on the edit icon (cogs, gear wheels) and choose "Change Paraphrase".
Or... using the command-line:
Here is the answer that worked for me, after Hamish helped me to realize my typo.
WARNING (for older Ubuntu versions, newer (e.g. 19.04) should be bug-fixed but be careful anyway): If you only have one key and remove it before adding another, you will render your disk inaccessible after rebooting! This also means you can not add a new key anymore afterwards. Thanks waffl and khaimovmr for these helpful comments.
First, you need to find out which is the encrypted LVM partition, it may be sda3, but it can also be sda5 (default on Ubuntu LVM), sdX2, ...:
cat /etc/crypttab
To add a new password, use luksAddKey:
sudo cryptsetup luksAddKey /dev/sda3
To remove an existing password, use luksRemoveKey:
sudo cryptsetup luksRemoveKey /dev/sda3
View currently used slots of the encrypted partition:
sudo cryptsetup luksDump /dev/sda3
Cited from this blog. Thanks.
Be aware: Flimm experienced that Ubuntu's system keyboard layout changed from Dvorak to Qwerty. You cannot see which keyboard layout you are using (bug #1862656) and you cannot choose to display the password (bug #1862654). Also, you only get three tries before being forced to wait for 60 seconds (bug #1862660). Thanks flimm for the helpful comment!
Related Question
- How to Encrypt Entire Disk on Alternate Installation
- Password Encryption LVM LUKS Cryptsetup – How to Change Password of Encrypted LVM System
- Ubuntu – “Guided – use entire disk and set up encrypted LVM” LUKS or plain dm-crypt
- LVM – How to Migrate an Encrypted LVM Install to a New Disk
- Ubuntu – Ubuntu full disk encryption with encrypted /boot
- Ubuntu – Unable to mount external encrypted disk
Best Answer
I've just done it with the old command line installer mini CD at https://help.ubuntu.com/community/Installation/MinimalCD
In searching for a fix, I notice a bunch of bugs in encrypted installs. Maybe they disabled it rather than take chances. But, they should have mentioned it in the release notes.
BTW, I also tried creating the LVM crypt disk setup before starting the installer. It did see it, but when I tried to boot, I just got the intrmfs prompt. So don't waste your time on it.