Install on encrypted partitions?

[Nuxro]

Hi,

Is there a way I can have the install done on an encrypted (luks) /? I didn't see any encryption options during the partitioning.

[evan79]

I 2nd this request, thanks

[HaTeMe]

TrueCrypt inside of the Installer would be cool.

[michaelzap]

+1 I'm really excited about this project, and I'm willing to give 32-bit with a PAE kernel a try for now. But I definitely need either to use LUKS or the encrypted home directory method of keeping my data safe.

I'm sure there are ways to do this, so it'll just be a matter of figuring them out or someone sharing them.

[Nuxro]

+1 I'm really excited about this project, and I'm willing to give 32-bit with a PAE kernel a try for now. But I definitely need either to use LUKS or the encrypted home directory method of keeping my data safe.

I'm sure there are ways to do this, so it'll just be a matter of figuring them out or someone sharing them.

To have your /home partition encrypted is trivial, have a look here:
http://feeding.cloud.geek.nz/2008/05/en ... using.html or
http://www.hermann-uwe.de/blog/howto-di ... and-debian
There are really a lot of examples on the internets.

As for the PAE, if it bugs you, you can always try to install a 64bit kernel from Debian Testing.

[noah++]

The graphical portion of the Linux Mint installer doesn't offer this option like OpenSUSE does. But it should be possible to drop into a shell to run the necessary commands to set up encrypted root (or any other encrypted filesystem) before the installer tries to partition or to copy over the system files. For these commands, you can follow just about any LUKS whole-disk encryption setup guide.

TrueCrypt inside of the Installer would be cool.

Note that TrueCrypt cannot encrypt the Linux root filesystem.

[Nuxro]

TrueCrypt inside of the Installer would be cool.

Note that TrueCrypt cannot encrypt the Linux root filesystem.

And it also has licensing problems. I don't think TrueCrypt is really an option for linux users, from a philosophical point of view.
Luks and ecryptfs are nice enough to not need anything else.

[michaelzap]

+1 I'm really excited about this project, and I'm willing to give 32-bit with a PAE kernel a try for now. But I definitely need either to use LUKS or the encrypted home directory method of keeping my data safe.

I'm sure there are ways to do this, so it'll just be a matter of figuring them out or someone sharing them.

To have your /home partition encrypted is trivial, have a look here:
http://feeding.cloud.geek.nz/2008/05/en ... using.html or
http://www.hermann-uwe.de/blog/howto-di ... and-debian
There are really a lot of examples on the internets.

As for the PAE, if it bugs you, you can always try to install a 64bit kernel from Debian Testing.

For some reason I hadn't noticed this reply before. Thanks for the links. What I'll probably want to do, however, is dual-boot Win7 (encrypted with TrueCrypt) and LMDE (with all data on a LUKS LVM, so that swap and tmp are also protected). I've seen some Debian tutorials for doing this, so I think LMDE will work just as well. For example:
http://ruleant.blogspot.com/2009/11/how ... -boot.html
http://www.redmezzanine.com/?p=92&lang=en

Now I just need a few free hours to give it a try...

[dfx]

The graphical portion of the Linux Mint installer doesn't offer this option like OpenSUSE does. But it should be possible to drop into a shell to run the necessary commands to set up encrypted root (or any other encrypted filesystem) before the installer tries to partition or to copy over the system files. For these commands, you can follow just about any LUKS whole-disk encryption setup guide.

Dropping into a shell is possible, but I didn't find a way in LMDE installer to install on a LVM volume, I just could select real partitions.

After some days I got it working anyway I installed LMDE in a VM and rsynced the files to my system booted with the live DVD. Before you have to prepare and mount the encrypted LVM volume. For that you can stick to the tutorials on the net. After rsync you still have to do the chroot stuff like installing grub, adopting initramfs and so on. That steps should be in the tutorials, too.