[SOLVED] Custom cryptsetup parameters using Ubiquity

Questions about Grub, UEFI,the liveCD and the installer
Forum rules
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Locked
HFspT

[SOLVED] Custom cryptsetup parameters using Ubiquity

Post by HFspT »

As far as I know the installation of Linux Mint with Ubiquity and selecting LUKS uses the default parameters for 'cryptsetup'. Is it possible to choose custom parameters for 'cryptsetup' when installing Mint Linux?

Thanks.
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 3 times in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
User avatar
Derek_S
Level 6
Level 6
Posts: 1279
Joined: Sat Dec 28, 2013 5:36 pm
Location: Long Island, N.Y.

Re: Custom cryptsetup parameters

Post by Derek_S »

The answer is yes, provided you are willing to forego using the Mint installer and learn how to do a step-by-step manual installation. Here is a link I had to find using the Wayback Machine website: https://web.archive.org/web/20180527183 ... ith-ubuntu

Also, a link to the encryption options when using cryptsetup: https://wiki.archlinux.org/index.php/Dm ... _LUKS_mode

And, a link comparing benchmarks for using aes, blowfish, twofish, and serpent ciphers: https://unix.stackexchange.com/question ... n-for-luks
"When you rise in the morning, give thanks for the light, for your life, for your strength. Give thanks for your food and for the joy of living. If you see no reason to give thanks, the fault lies in yourself." - Tecumseh
HFspT

Re: Custom cryptsetup parameters

Post by HFspT »

Thanks for your help.

It seems odd that Ubiquity does not provide an option to do it.
HFspT

Re: Custom cryptsetup parameters

Post by HFspT »

I have found an easy way to solve the problem in two steps:

1) Install Linux Mint using Ubiquity, as usual, and choosing the encryption of the disk. This takes care of everything about LUKS and encrypts the disk with the default parameters for 'cryptsetup'. Shutdown the computer when it has finished.

2) Start the computer again using Linux Mint Live-CD. The idea is not starting the Linux Mint installed in the previous step, but the Live CD.
  • The command 'lsblk' will list the block devices, so that you can find the encrypted device (its size might help). In my case '/dev/sda5'.
  • You can test if it is the correct device using 'sudo cryptsetup luksDump <your-block-device>', which it will list the LUKS header information.
  • You can reencrypt the LUKS volumen using 'sudo cryptsetup-reencrypt' and providing the new encryption parameters. Depending on the speed of the computer and the size of the volumen it can take time.
  • Restart the computer when it has finished, and that's all.
Locked

Return to “Installation & Boot”