I've done it. I strongly wanted Mint but I've always used the Ubuntu alternate installer disc because a lack of full disk encryption is a deal-killer for me. Clem's suggestion seemed easy enough. It wasn't. I managed to screw up a dozen attempts and I could fill pages with all the error messages I got trying various things. However, here's what finally worked.
OK, I've used Ben's post to help me set up full-disk encryption. Using a Linux Mint 14 Cinnamon 64 bit DVD, and I also wanted also have Mint auto-encrypt my /home folder but then to relocate it to a separate (second) disk drive. Here's what I did that worked:STAGE 1 - build encrypted system
a. Boot Linux Mint Live CD
b. Erase the entire MBR of the target disk (sda in my case), including the partition table (this will destroy the existing partitions on the disk which is what I wanted).
- Code: Select all
dd if=/dev/zero of=/dev/sda/ bs=512 count=1
c. In Software Manager, uninstall Ubiquity 2.10 and install Ubiquity 2.12.16 (it also downloads a heap of other stuff, incl KDE files, just ignore it as these don't seem to end up on the built machine)
d. In a terminal run sudo ubiquity
and step through till you are asked about where to install. Choose the option to set up encrypted LVM.
e. If you plan to move your /home folder to a separate disk, then at the user details screen tick 'encrypt home folder'
f. Allow installation to proceed till complete, then Reboot when advised.You should now have an encrypted system disk with the /home folder also separately encryptedSTAGE 2 - Move your encrypted home folder to a second drive
(I got these notes from another post but can't recall who/where, sorry!)
a. To move /home folder to second disk drive (sdb1 in my case, but yours may be different) do as follows:sudo mkfs -t ext4 /dev/sdb1
(new home partition on second disk drive)sudo mkdir /mnt/home
(create temporary mount folder)sudo mount /dev/sdb1 /mnt/home
(mount the new /home drive at /mnt/home)sudo cd /home sudo rsync -a . /mnt/home
(copy all files and folders with permissions from current /home to new /home)
b. Update /etc/fstab to reflect the changes, as follows:
Get the drive ID for sdb1 with sudo blkid
then edit fstab: gksu gedit /etc/fstab
Add this line to bottom of the file and save it:
UUID=(here insert sdb1's UUID)
/home ext4 rw,errors=remount-ro 0 1
c. Reboot and log in.
You can remove the temporary folder: sudo rmdir /mnt/homeUse the Disks utility in the Accessories menu to confirm that the second drive is mounted as home.
Hope this helps someone.
NB I have also had the reported problem of a blank screen after booting a newly encrypted disk (it was on an Ubuntu build). An ATI Radeon driver issue in my case. Once i figured out that I just had to type my encryption passphrase and press Enter, I was quite ok with it, kinda liked the idea of it hiding the passphrase prompt!