Kubuntu 22.04 direkt verschlüsselt installieren
Wo finde ich dazu eine gute Anleitung?
https://wiki.ubuntuusers.de/LUKS/
In dem Partitionmanager von KDE können verschlüsselte Partitionen erstellt werden.
Wie mache ich das?
https://wiki.ubuntuusers.de/LUKS/
luispabon - xps_15_9560dualboot_with_encryptionnotes.md https://gist.github.com/luispabon/db2c9e5f6cc73bb37812a19a40e137bc
superjamie - How to install Ubuntu with LUKS Encryption on LVM https://gist.github.com/superjamie/d56d8bc3c9261ad603194726e3fef50f
Entwurf Kurzfassung superjamie
sudo -s
cryptsetup luksFormat /dev/sda7
cryptsetup open /dev/sda7 sda7_crypt
pvcreate /dev/mapper/sda7_crypt
vgcreate vgubuntu /dev/mapper/sda7_crypt
lvcreate -L 50G -n root vgubuntu
lvcreate -L 50G -n home vgubuntu
lvcreate -l 100%FREE -n swap vgubuntu
## Use Kubuntu 22.04 Installer
####
When the installer finishes, don't reboot.
####
####
When the installer finishes, don't reboot.
####
mkdir -p /target
lsblk um Info zu bekommen
mount /dev/mapper/vgubuntu-root /target
for DIR in proc sys dev /etc/resolv.conf; do mount --rbind /$DIR /target/$DIR; done
chroot /target
mount -a
blkid
/dev/sda7: UUID="6c498dc2-eefe-44b6-92e1-9df2b625ad0c" TYPE="crypto_LUKS" PARTUUID="4fc84996-2109-c743-a34b-c5833eac652d"
nano /etc/crypttab
## input
vgubuntu UUID="6c498dc2-eefe-44b6-92e1-9df2b625ad0c" none luks
### The none parameter makes the system ask for passphrase on boot.
nano /etc/default/grub and set:
GRUB_ENABLE_CRYPTODISK=y
### If you want to mount /tmp as tmpfs (ramdisk) then:
sudo ln -s /usr/share/systemd/tmp.mount /etc/systemd/system/
sudo systemctl enable tmp.mount
### Update the initramfs for all installed kernels:
update-initramfs -u -k all
### Update the GRUB bootloader config:
grub-mkconfig -o /boot/grub/grub.cfg
Exit the chroot with Ctrl+d and turn the system off gracefully with poweroff.
Remove the LiveUSB, boot normally.
You will be asked for your encryption passphrase before boot proceeds.
/etc/grub/default (damit Menü sichtbar https://www.computerbase.de/forum/threads/dual-boot-linux-windows-10-grub-nicht-sichtbar.2037349/ )
If you change this file, run 'update-grub' afterwards to update # /boot/grub/grub.cfg. # For full documentation of the options in this file, see: # info -f grub -n 'Simple configuration' GRUB_DEFAULT=saved GRUB_SAVEDEFAULT=true #GRUB_DEFAULT=0 #GRUB_TIMEOUT_STYLE=hidden GRUB_TIMEOUT=2 GRUB_DISTRIBUTOR=`lsb_release -i -s 2> /dev/null || echo Debian` GRUB_CMDLINE_LINUX_DEFAULT="quiet splash" GRUB_CMDLINE_LINUX="" #GRUB_ENABLE_CRYPTODISK=y GRUB_DISABLE_OS_PROBER=false # Uncomment to enable BadRAM filtering, modify to suit your needs # This works with Linux (no patch required) and with any kernel that obtains # the memory map information from GRUB (GNU Mach, kernel of FreeBSD ...) #GRUB_BADRAM="0x01234567,0xfefefefe,0x89abcdef,0xefefefef" # Uncomment to disable graphical terminal (grub-pc only) #GRUB_TERMINAL=console GRUB_TERMINAL=console # The resolution used on graphical terminal # note that you can use only modes which your graphic card supports via VBE # you can see them in real GRUB with the command `vbeinfo' #GRUB_GFXMODE=640x480 # Uncomment if you don't want GRUB to pass "root=UUID=xxx" parameter to Linux #GRUB_DISABLE_LINUX_UUID=true # Uncomment to disable generation of recovery mode menu entries #GRUB_DISABLE_RECOVERY="true" # Uncomment to get a beep at grub start #GRUB_INIT_TUNE="480 440 1"
