[Solved] Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Questions about Grub, UEFI,the liveCD and the installer
Forum rules
Before you post please read how to get help
Post Reply
th23
Level 1
Level 1
Posts: 8
Joined: Mon May 21, 2018 2:51 pm

[Solved] Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by th23 » Tue May 22, 2018 4:35 am

Hi together,

I recently started to switch from Windows 7/10 to Linux Mint 18.3, 64bit, Cinnamon - currently trying on a spare PC how to setup and which programs to use. The following question might have come up before, but it seems the answers differ depending on the disk setup, so bear with me for a similar question...

I want to encrypt the system (having read many pros/cons for Linux) as I did before. The HDD / partition setup looks like the following:

Code: Select all

/dev/sda
-- /dev/sda1 - ext4 - /root
-- /dev/sda2 - ext4 - /home
-- /dev/sda5 - swap
[optional, 2nd step, including additional SSD for editing photos/videos, just it there is something to consider already now about it...]

Code: Select all

/dev/sdb
-- /dev/sdb1 - ext4 - "media"
Under Windows 7/10 I used TrueCrypt with full disk encryption for "sda" which required only once to enter the password before the boot. Using this password as well for the encryption of "sdb", I could store the pass/hash in memory using it to automatically mount "sdb" after boot.

I would like to achieve a similar setup under Linux Mint - but failed attempting various tutorials/explanations I found. Is there any "simple" method/ path to follow?

Already tried/ followed:
https://community.linuxmint.com/tutorial/view/2265
https://github.com/CallumCameron/mint-e ... /README.md
https://community.linuxmint.com/tutorial/view/2026
https://web.archive.org/web/20171114233 ... encryption

Thanks a lot in advance!

Thorsten
Last edited by th23 on Mon May 28, 2018 5:18 am, edited 1 time in total.

User avatar
Moem
Level 15
Level 15
Posts: 5850
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Moem » Tue May 22, 2018 4:44 am

Any reason why you did not choose to encrypt during installation? As far as I know, that's the easiest way.
(I have no idea how Win10 handles encryption, or, frankly, anything.)
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

th23
Level 1
Level 1
Posts: 8
Joined: Mon May 21, 2018 2:51 pm

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by th23 » Tue May 22, 2018 4:52 am

Moem wrote:
Tue May 22, 2018 4:44 am
Any reason why you did not choose to encrypt during installation?
I didn't find an option to select full disk encryption - only to encrypt the "home" folder, but not the whole operating system. Did I miss something there?

User avatar
Pierre
Level 16
Level 16
Posts: 6715
Joined: Fri Sep 05, 2008 5:33 am
Location: Perth, AU.

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Pierre » Tue May 22, 2018 5:00 am

it's usually only for the /home partition or folder.

so, why is that not enough ??.
Image
Please edit your original post title to include [SOLVED] - when your problem is solved!
and DO LOOK at those Unanswered Topics - - you may be able to answer some!.

User avatar
Moem
Level 15
Level 15
Posts: 5850
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Moem » Tue May 22, 2018 5:02 am

Maybe you missed the option for encryption on this screen?

Image
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

th23
Level 1
Level 1
Posts: 8
Joined: Mon May 21, 2018 2:51 pm

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by th23 » Tue May 22, 2018 5:09 am

Moem wrote:
Tue May 22, 2018 5:02 am
Maybe you missed the option for encryption on this screen?
Somehow, I did or confused it with the "home" encryption option... Thanks for pointing out, will try again with this one :roll:

Does this at the same time allow for customization of the partitions created - or is it better to go with the standard and change / adapt later once encrypted?

User avatar
Moem
Level 15
Level 15
Posts: 5850
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Moem » Tue May 22, 2018 5:15 am

Someone else will need to answer that as I don't use encryption. Please note that full disk encryption is not recommended for new Linux users. Too many folks getting in trouble (most of them by forgetting their passphrase, but there are other ways too). If you feel that you still want to do it, be sure to have a backup of your data elsewhere.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

User avatar
Pierre
Level 16
Level 16
Posts: 6715
Joined: Fri Sep 05, 2008 5:33 am
Location: Perth, AU.

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Pierre » Tue May 22, 2018 5:24 am

but, if you did backup elsewhere - then you'd to encrypt that too,, wouldn't you ?
otherwise, it's pointless in encrypting just the Full Disk, isn't it ?

ie: lot's of folks will use TrueCrypt within the windows system,
but then neglect to include the ext backup, in the TrueCrypt options . . .
Image
Please edit your original post title to include [SOLVED] - when your problem is solved!
and DO LOOK at those Unanswered Topics - - you may be able to answer some!.

User avatar
Moem
Level 15
Level 15
Posts: 5850
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Moem » Tue May 22, 2018 5:32 am

Pierre wrote:
Tue May 22, 2018 5:24 am
but, if you did backup elsewhere - then you'd to encrypt that too,, wouldn't you ?
otherwise, it's pointless in encrypting just the Full Disk, isn't it ?
No?
If you take your computer with you, and it's encrypted, and you have a backup at home in a safe place (say, a locked vault)... how would that make the encryption of the disk pointless?
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

Mute Ant
Level 13
Level 13
Posts: 4778
Joined: Tue Sep 03, 2013 7:45 pm

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by Mute Ant » Tue May 22, 2018 6:23 am

"...does this at the same time allow for customization of the partitions created..." No, it's hard-coded into the Ubuntu-Mint installer, one drive holds one encrypted Mint installation. That's not totally undesirable. You get a large pool of helpers who already know what the OS looks like.
In Chapter One, Boron slays the entire Marketing Department by explaining Asynchronous Protocols.

th23
Level 1
Level 1
Posts: 8
Joined: Mon May 21, 2018 2:51 pm

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by th23 » Tue May 22, 2018 6:43 am

Pierre wrote:
Tue May 22, 2018 5:24 am
but, if you did backup elsewhere - then you'd to encrypt that too,, wouldn't you ?
Of course, backups (even while stored in a safe place) are also encrypted...currently as well via TrueCrypt, but assume LUKS can also deal with external volumes

th23
Level 1
Level 1
Posts: 8
Joined: Mon May 21, 2018 2:51 pm

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by th23 » Tue May 22, 2018 6:44 am

Mute Ant wrote:
Tue May 22, 2018 6:23 am
No, it's hard-coded into the Ubuntu-Mint installer, one drive holds one encrypted Mint installation. That's not totally undesirable. You get a large pool of helpers who already know what the OS looks like.
Understood, thanks for the hint - will use this as a "basis" and do a bit trial & error from the standard install, to learn about the setup on my spare computer for now :wink:

th23
Level 1
Level 1
Posts: 8
Joined: Mon May 21, 2018 2:51 pm

Re: Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by th23 » Mon May 28, 2018 5:18 am

Thanks again for all your input and ideas! I spent the weekend to try out various things and approaches:

I still prefer to get the fully encrypted setup, only/max leaving the boot partition unencrypted. However, I wanted to modify the standard installation option provided by the Linux Mint installer, so I ended up with multiple tutorials...and after trying those, the following for me worked and was good to follow:
https://nowhere.dk/articles/installing- ... on-and-lvm

In case some other new joiner is looking to guidance :-)

newminty2018
Level 1
Level 1
Posts: 7
Joined: Tue May 29, 2018 3:09 pm

Re: [Solved] Newbie: Full disk encryption - as with TrueCrypt under Windows 7/10

Post by newminty2018 » Tue May 29, 2018 5:58 pm

Hi Thorsten,

I was recently looking at the latest version of Veracrypt (Truecrypt) with a view to full disk encryption.

I almost did it, but something stopped me.

Veracrypt offered me the option to encrypt 'a system with either multiple operating sytems installed or dual boot system' .
I stopped the Veracrypt install because I want to install Linux Mint in a dual boot with Windows 7 and thought I better get that up and running and then go back to Veracrypt to encrypt the whole system with 'multiple operating systems'.

So if your looking at Truecrypt perhaps try the current version of Veracrypt that gives you the option above and hopefully that may solve your problem..

Regards
Newminty2018

Post Reply

Return to “Installation & Boot”