As far as I know the installation of Linux Mint with Ubiquity and selecting LUKS uses the default parameters for 'cryptsetup'. Is it possible to choose custom parameters for 'cryptsetup' when installing Mint Linux?
Thanks.
[SOLVED] Custom cryptsetup parameters using Ubiquity
Forum rules
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
[SOLVED] Custom cryptsetup parameters using Ubiquity
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 3 times in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
Re: Custom cryptsetup parameters
The answer is yes, provided you are willing to forego using the Mint installer and learn how to do a step-by-step manual installation. Here is a link I had to find using the Wayback Machine website: https://web.archive.org/web/20180527183 ... ith-ubuntu
Also, a link to the encryption options when using cryptsetup: https://wiki.archlinux.org/index.php/Dm ... _LUKS_mode
And, a link comparing benchmarks for using aes, blowfish, twofish, and serpent ciphers: https://unix.stackexchange.com/question ... n-for-luks
Also, a link to the encryption options when using cryptsetup: https://wiki.archlinux.org/index.php/Dm ... _LUKS_mode
And, a link comparing benchmarks for using aes, blowfish, twofish, and serpent ciphers: https://unix.stackexchange.com/question ... n-for-luks
"When you rise in the morning, give thanks for the light, for your life, for your strength. Give thanks for your food and for the joy of living. If you see no reason to give thanks, the fault lies in yourself." - Tecumseh
Re: Custom cryptsetup parameters
Thanks for your help.
It seems odd that Ubiquity does not provide an option to do it.
It seems odd that Ubiquity does not provide an option to do it.
Re: Custom cryptsetup parameters
I have found an easy way to solve the problem in two steps:
1) Install Linux Mint using Ubiquity, as usual, and choosing the encryption of the disk. This takes care of everything about LUKS and encrypts the disk with the default parameters for 'cryptsetup'. Shutdown the computer when it has finished.
2) Start the computer again using Linux Mint Live-CD. The idea is not starting the Linux Mint installed in the previous step, but the Live CD.
1) Install Linux Mint using Ubiquity, as usual, and choosing the encryption of the disk. This takes care of everything about LUKS and encrypts the disk with the default parameters for 'cryptsetup'. Shutdown the computer when it has finished.
2) Start the computer again using Linux Mint Live-CD. The idea is not starting the Linux Mint installed in the previous step, but the Live CD.
- The command 'lsblk' will list the block devices, so that you can find the encrypted device (its size might help). In my case '/dev/sda5'.
- You can test if it is the correct device using 'sudo cryptsetup luksDump <your-block-device>', which it will list the LUKS header information.
- You can reencrypt the LUKS volumen using 'sudo cryptsetup-reencrypt' and providing the new encryption parameters. Depending on the speed of the computer and the size of the volumen it can take time.
- Restart the computer when it has finished, and that's all.