Re: Ubuntu 11.10 FDE w/ XTS
Quote:
Originally Posted by
ztux
NOTE: This guide is currently incomplete.
I'm installing Ubuntu 11.10 to my laptop with full disc encryption using the XTS cipher.
XTS is not a cipher. It is a mode of operation. The cipher used is AES with the option to use Twofish and maybe one other. But there is really no reason to use anything but AES.
XTS is the newer mode of operation standard but CBC-ESSIV is still highly secure and thus I see no reason to go through the pain of getting XTS setup. It will eventually make it's way into the mainstream installer I imagine.
Re: Ubuntu 11.10 FDE w/ XTS
Thanks for the correction. I've done this setup before, on earlier versions of Ubuntu, so I took it as a challenge to get it working in this version. Like some other users, I like having options and having my computer work my way. That's what Linux is about.
Re: Ubuntu 11.10 FDE w/ XTS
Hello ztux. I've got a few noob questions for you. In the first code of your guide, it says
Code:
audo apt-get install lvm2
Should it be sudo instead of audo?
And I presume that this guide is for a new install, not an upgrade?
Re: Ubuntu 11.10 FDE w/ XTS
Right, it should say sudo. I'll fix it. And yes, this is for a clean install.
Are you trying to do an upgrade? Make sure the options field of crypttab does not have an 'lvm=' option set. It's in the earlier versions of some guides but it breaks this version of Ubuntu. There's no need to include additional modules, the default initrd will include all the necessities.
Re: Ubuntu 11.10 FDE w/ XTS
Not sure if it a problem with my setup or if it's required, but I had to reformat all the LVs again in the screen where you choose the mount points. Both a test install in virtual box and an install on my laptop required this.
Since I just formatted all the LVs from xterm, I did not choose to format them in the installer. Then the installer hung. Tried a second time, choosing to format them again and installer continued.
Thank you for the guide. I've always used the alternate disc (since it supports LVM at bootup), but this method is far better, at least for me.
Re: Ubuntu 11.10 FDE w/ XTS
This is kind of an older thread, but does any one know why it doesn't work in the alternate cd anymore? Things like LVM and cryptsetup are supported on the alternate disk, but doesn't install the lvm2 and cryptsetup packages on the actual system installation after you take the time to set it all up in the installer. Also, the removal of aptitude/fdisk/apt-get/dpkg make it implausible to use the alternate cd anymore.
I spent last night from 8PM to 2:30AM nonstop trying to get it to work with the alternate CD (like I did with all the other previous installations) before finally giving up and installing it with the desktop cd (which doesn't have the more advanced text installer). Did they remove it because of space restrictions on the cd?
And btw, here is an older guide I found detailing how to make this work too:http://and1equals1.blogspot.com/2009...plausible.html (it doesn't use the LUKS part of cryptsetup though)
Re: Ubuntu 11.10 FDE w/ XTS
Hello. I have done everything according to your directions. However, the installer won't let me set mount points. Any help would be appreciated.