0

Trying to do "Full Disk Encryption" using LUKS/dm-crypt on Ubuntu 18.04 LTS with "/boot" partition encrypted as well.

I've found this tutorial that is explaining quite well how to do it with Ubuntu 19.04. After following all step multiple times, I can't make it working on my disk.

Each time I reboot, at the end, the next boot ends up on grub command line without showing me an error or something. I tried to load module mannualy in order to boot but GRUB can't seem to find them.

I tried the same process on Ubuntu 20.04 LTS and no problem noticed. Everything worked perfectly according to the tutorial. (Need to stick to LTS version)

I noticed that GRUB version and Cryptsetup version are different between these 2 version and that I have to be carefull about LUKS partition type for "/boot". After creating LUKS partition for "/boot" and dump header, everything seems OK.

On Ubuntu 18.04 :

GRUB Version : 2.0.2
Cryptsetup Version : 2.0.2

On Ubuntu 20.04 :

Grub version : 2.0.4
Cryptsetup version 2.2.2

I've done a lot of research online about my problem but I didn't find one that looks like what I'm trying to do, on Ubuntu 18.04 LTS at least. Almost everything information I found were about Ubuntu 19.04 or superior.

Do you know if it's possible to encrypt /boot partition with Ubuntu 18.04 LTS ? I can't upgrade to 20.04 LTS.

0 Answers0