** Summary changed:

- Insufficient options for encryption
+ Side by side install with Windows does not also provide encryption option

** Description changed:

- It won't look like it, but I've tried to keep this as concise as
- possible whilst trying to keep the detail needed to show a genuine
- frustration with the situation faced.
- 
- --
- 
- My employer gave me a new Dell laptop and (although I don't use Windows,
- unlike my colleagues) I'd been told to keep the Windows/Dell/EFI
- partitions intact for any potential later use (as it seems Windows 10
- doesn't believe in serial keys/recovery media any more).
- 
- I happily obliged, and on first boot up got it straight into the Ubuntu
- MATE 18.04 installer via USB pen.  I wanted to pick the "Encrypt the new
- Ubuntu installation for security" but this would've wiped the whole
- disk.  So I head in to 'Something else' to shrink the main Windows
- partition and made myself a little ext4 /boot partition and an encrypted
- ext4 root partition.
- 
- But I quickly learned that hibernation doesn't work with swap files and
- needs a swap partition (I'd normally be overjoyed as I hate swap
- partitions - that is... until now, when I need one).
- 
- What is really needed is to be able to use the "Encrypt the new Ubuntu
- installation for security" as that will put both an ext4 root and swap
- partition within LVM and also within LUKS/crypt.
- 
- So I did just that (but using a VM) so I could witness what things got
- named... turns out I'd need /dev/nvme0n1p5 to be an ext4 /boot and
- /dev/nvme0n1p6 to be LUKS as /dev/mapper/nvme0n1p6_crypt.  Then make an
- LVM PV with a VG named ubuntu-mate-vg and 2 LVs which end up being
- /dev/mapper/ubuntu--mate--vg--root and /dev/mapper/ubuntu--mate--vg-
- swap_1.  This way I'd end up with what "Encrypt the new Ubuntu
- installation for security" would have created if it just supported going
- into available free space rather than wiping the whole disk.
- 
- So using the 'Try Ubuntu' option on the USB pen I got a desktop and
- manually created all the entities talked about... then immediately after
- ran the installer from the desktop which could then see the /dev/mapper
- entries to install to.  This has been fine but since the installer
- didn't set up LUKS I had to manually install a /etc/crypttab afterwards
- and re-initramfs/re-install GRUB.
- 
- I suppose I *could* have just made another partition as encrypted
- swap... but that'd require jumping through just as many hoops doing that
- to then possibly then find on boot it may ask for two encryption
- passwords.
- 
- So I do *at last* have a hibernating, dual booting and encrypted laptop
- :)
- 
- But surely it would be better to allow the "Encrypt the new Ubuntu
- installation for security" option to work in available free space ...
- rather than forcing a wipe of the whole disk?  Or an "Install alongside
- Windows" type option but with encryption?
- 
- I'd equally welcome any other way of installing with encryption (again
- to free space, not wipe whole disk) *without* LVM... but if this is with
- a swap partition then the user should only be prompted for a password
- once on boot (for both encrypted root and encrypted swap)... or if this
- is using a swap file then hibernation needs to work with it.
- 
- Sorry for the long report :)
+ When installing side by side with Windows, the option to use encryption
+ is not provided.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1780971

Title:
  Side by side install with Windows does not also provide encryption
  option

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1780971/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to