Hello !
This topic is about full disk encryption. I need this for /home, swap and
root (/).
Maybe if someone knows, after, put /boot on a USB key. I'm new in Linux
environment but I can learn ;)
I'm gonna explain what I've make here cause this doesn't work..
Thanks everybody !
>> sudo su
>> apt-get update
>> apt-get crypsetup
Play a with Gparted :
- sda1 5,2 GB ext4 (/boot and bootloader)
- sda2 8,4 GB swap (swap)
- sda3 682 GB ext4 (/)
>> cryptsetup -y --cipher aes-xts-essiv:sha256 --key-size 512 luksFormat
/dev/sda3
>> cryptsetup -y --cipher aes-xts-essiv:sha256 --key-size 512 luksFormat
/dev/sda2
>> cryptsetup luksOpen /dev/sda3 crypto_root
>> cryptsetup luksOpen /dev/sda2 crypto_swap
>> mkfs.ext4 /dev/mapper/crypto_root
>> mkswap /dev/mapper/crypto_swap
Launch Trisquel's installation from livecd 6.0.1
Manual particioning :
/ : /dev/mapper/crypto_root
swap : /dev/mapper/crypto_swap
/boot : /dev/sda1
bootloader : /dev/sda1
After finish,
>> mkdir /mnt/root
>> mount /dev/mapper/crypto_root /mnt/root
>> mount /dev/ /mnt/root/dev -o bind
>> chroot /mnt/root mount /proc
>> chroot /mnt/root mount /sys
>> chroot /mnt/root
echo "root /dev/disk/by-uuid/$(blkid -o value -s UUID /dev/sda3) none luks"
>> /etc/crypttab
echo xts >> /etc/initramfs-tools/modules
echo aes_x86_64 >> /etc/initramfs-tools/modules
echo essiv:256 >> /etc/initramfs-tools/modules
>> apt-get update
>> apt-get install cryptsetup
>> mount /boot
>> update-initramfs -u
Here the first error :
w : mdadm : /etc/mdadm/mdadm.conf defines no arrays
When I reboot, i have this error :
BusyBox v.18.5 (Ubuntu 1:1.18.5-1 ubuntu4.1) built-in shell (ash)
Enter "help" for a list of built-in commands
(Initramfs)
I think all of this is bad but if someone has a good tutorial or have time to
help me..
Thanks :)
