UbuntuHelp:EncryptedFilesystemsViaUbiquity

文章出处:

https://help.ubuntu.com/community/EncryptedFilesystemsViaUbiquity

点击翻译:

English

请不要直接编辑翻译本页，本页将定期与来源同步。

1. title LVM/luks-crypto support with the Ubuntu desktop CD

{i} Please refer to EncryptedFilesystems for further documentation.

The Desktop CD installer (ubiquity) currently does not provide support for setting up LVM or encrypted partitions. With the recipe below, the Desktop CD can be used to install Ubuntu on a previously created (optionally encrypted) LVM.

• Boot desktop CD, open terminal, and install missing packages:

apt-get install cryptsetup lvm2
sudo modprobe dm-crypt

• Now set up the LVM and crypto partitions with the command line tools. If you already have Ubuntu installed on a standard LVM-on-LUKS, this is as easy as:

sudo cryptsetup luksOpen /dev/sda4 sda4_crypt

or whichever partition is the encrypted LVM PV. This should automatically create the LVM LVs in `/dev/mapper/`.

• Start ubiquity with manual partitioning, and use the existing

partitions; keep `/home` etc. as they are, and reformat the root partition in the LVM. Do not reboot immediately, your system will not boot!

• Mount the newly installed target system:

sudo mount /dev/mapper/ubuntu*-root /mnt
sudo chroot /mnt mount /proc
sudo mount --bind /dev /mnt/dev
sudo chroot /mnt mount /boot

• Create an appropriate crypttab:

echo "sda4_crypt UUID=`sudo vol_id --uuid /dev/sda4` none luks" | sudo tee -a /mnt/etc/crypttab

• Install a few missing packages into the target system (this will

also take care of updating the initramfs):

sudo chroot /mnt apt-get install cryptsetup lvm2 dmsetup

• Unmount the target system:

sudo umount /mnt/proc /mnt/dev /mnt/boot /mnt

• Reboot into your newly installed system.