What is encrypted are the operating system partition and the boot-loader second-stage file-system which includes the Linux kernel and initial RAM disk. I'm (Tj) being deliberately pedantic in calling this almost Full Disk Encryption since the entire disk is never encrypted. It is intended to replace the current (hopelessly out-of-date and inadequate) FullDiskEncryptionHowto page. It is also a useful overview on the manual steps required for storage-at-rest encryption. It requires 36 commands be performed in a terminal, all of which are shown in this guide and most can be copy and pasted. It is focused on modifying the Ubuntu Desktop installer process in the minimum possible way to allow it to install with an encrypted /boot/ and root file-system. This page is an up-to-date guide ( last revised August 2022) to comprehensive LUKS encryption, including GRUB, covering 18.04 LTS and later releases.
Further support may be available from the official Ubuntu support community IRC channel #ubuntu on Libera ( or ).
0 kommentar(er)
