Page 1 of 3 123 LastLast
Results 1 to 10 of 21

Thread: Entire System / Boot Sector Encryption

  1. #1
    Join Date
    Nov 2007
    Beans
    331
    Distro
    Ubuntu 12.04 Precise Pangolin

    Question Entire System / Boot Sector Encryption

    Hello!

    Is there a good "How To" on encrypting an entire installation, including the boot sector?

  2. #2
    Join Date
    Mar 2007
    Location
    Denver, CO
    Beans
    7,588
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Entire System / Boot Sector Encryption

    You need to install from the alternate CD and choose the LUKS encryption method. I wish I could recall all the details, however its is extremely easy and self explanatory.

    I'm not sure if it encrypts the boot sector however. Hopefully someone else will be able to chime in on this.

  3. #3
    Join Date
    Nov 2007
    Beans
    331
    Distro
    Ubuntu 12.04 Precise Pangolin

    Question Re: Entire System / Boot Sector Encryption

    http://releases.ubuntu.com/8.04/

    On the webpage above, I couldn't see MD5sum or SHA information for the Ubuntu alternative iso file.

    Where is this information published, so that I can check the integrity of the file?

  4. #4

    Re: Entire System / Boot Sector Encryption

    Quote Originally Posted by kevdog View Post
    You need to install from the alternate CD and choose the LUKS encryption method. I wish I could recall all the details, however its is extremely easy and self explanatory.

    I'm not sure if it encrypts the boot sector however. Hopefully someone else will be able to chime in on this.
    No that will not encrypt the boot sector. It actually also requires an unencrypted /boot partition.

    If you want to have even the MBR encrypted, you probably need hardware encryption tools.

  5. #5
    Join Date
    Oct 2004
    Location
    USA
    Beans
    330
    Distro
    Ubuntu 14.04 Trusty Tahr

    Re: Entire System / Boot Sector Encryption

    Quote Originally Posted by yeehi View Post
    http://releases.ubuntu.com/8.04/

    On the webpage above, I couldn't see MD5sum or SHA information for the Ubuntu alternative iso file.

    Where is this information published, so that I can check the integrity of the file?
    There is a MD5SUMS file on the page you listed that lists ubuntu-8.04-alternate-i386.iso and ubuntu-8.04-alternate-amd64.iso with their respective hashes. There is also a GPG signature file for the MD5SUMS.
    XBL Status: Xbox Live friend notifications for Linux

  6. #6
    Join Date
    Mar 2007
    Location
    Denver, CO
    Beans
    7,588
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Entire System / Boot Sector Encryption

    dm-crypt/LUKS DOES NOT encrypt the boot sector. In fact something needs to be unencrypted unless its integrated with the bios.

  7. #7
    Join Date
    Nov 2007
    Beans
    331
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Entire System / Boot Sector Encryption

    Quote Originally Posted by twisted_steel View Post
    There is a MD5SUMS file on the page you listed that lists ubuntu-8.04-alternate-i386.iso and ubuntu-8.04-alternate-amd64.iso with their respective hashes. There is also a GPG signature file for the MD5SUMS.
    The page is meant to have links to md5sums but I only get the following error message when I follow the links:

    ERROR
    Service Unavailable

    The requested service is unavailable.

    Please try again later.
    I did find the hashes here, though

    https://help.ubuntu.com/community/UbuntuHashes
    Last edited by yeehi; April 27th, 2008 at 01:13 PM.

  8. #8
    Join Date
    Oct 2007
    Location
    Seattle, WA USA
    Beans
    133
    Distro
    Ubuntu 13.10 Saucy Salamander

    Re: Entire System / Boot Sector Encryption

    There is this how-to, but as previous posters have said, luks does not encrypt /boot.
    Ubuntu 13.10x64 on Thinkpad x220 with crypted / and swap

  9. #9
    Join Date
    Nov 2005
    Location
    Nashville, TN
    Beans
    437
    Distro
    Ubuntu 14.04 Trusty Tahr

    Re: Entire System / Boot Sector Encryption

    Like it has been said, the boot partition is not encrypted but there's no reason you can't stick your /boot partition on a usb thumb drive if your computer can boot from usb.
    -Chayak

  10. #10
    Join Date
    Mar 2007
    Location
    Denver, CO
    Beans
    7,588
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Entire System / Boot Sector Encryption

    Do you actually have a working setup that can boot from usb? Id love to try this, however something tells me there is going to be some editing of some grub files and fstab files. I'd like to try if you have a How-To.

Page 1 of 3 123 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •