[SOLVED] Custom cryptsetup parameters using Ubiquity

Questions about Grub, UEFI,the liveCD and the installer
Forum rules
Before you post please read how to get help
Post Reply
HFspT
Level 1
Level 1
Posts: 3
Joined: Sun Jul 15, 2018 8:13 am

[SOLVED] Custom cryptsetup parameters using Ubiquity

Post by HFspT » Sun Jul 15, 2018 8:21 am

As far as I know the installation of Linux Mint with Ubiquity and selecting LUKS uses the default parameters for 'cryptsetup'. Is it possible to choose custom parameters for 'cryptsetup' when installing Mint Linux?

Thanks.
Last edited by HFspT on Fri Jul 20, 2018 3:18 pm, edited 2 times in total.

User avatar
Derek_S
Level 6
Level 6
Posts: 1242
Joined: Sat Dec 28, 2013 5:36 pm
Location: Long Island, N.Y.

Re: Custom cryptsetup parameters

Post by Derek_S » Mon Jul 16, 2018 4:29 pm

The answer is yes, provided you are willing to forego using the Mint installer and learn how to do a step-by-step manual installation. Here is a link I had to find using the Wayback Machine website: https://web.archive.org/web/20180527183 ... ith-ubuntu

Also, a link to the encryption options when using cryptsetup: https://wiki.archlinux.org/index.php/Dm ... _LUKS_mode

And, a link comparing benchmarks for using aes, blowfish, twofish, and serpent ciphers: https://unix.stackexchange.com/question ... n-for-luks
"When you rise in the morning, give thanks for the light, for your life, for your strength. Give thanks for your food and for the joy of living. If you see no reason to give thanks, the fault lies in yourself." - Tecumseh

HFspT
Level 1
Level 1
Posts: 3
Joined: Sun Jul 15, 2018 8:13 am

Re: Custom cryptsetup parameters

Post by HFspT » Thu Jul 19, 2018 9:15 am

Thanks for your help.

It seems odd that Ubiquity does not provide an option to do it.

HFspT
Level 1
Level 1
Posts: 3
Joined: Sun Jul 15, 2018 8:13 am

Re: Custom cryptsetup parameters

Post by HFspT » Fri Jul 20, 2018 3:13 pm

I have found an easy way to solve the problem in two steps:

1) Install Linux Mint using Ubiquity, as usual, and choosing the encryption of the disk. This takes care of everything about LUKS and encrypts the disk with the default parameters for 'cryptsetup'. Shutdown the computer when it has finished.

2) Start the computer again using Linux Mint Live-CD. The idea is not starting the Linux Mint installed in the previous step, but the Live CD.
  • The command 'lsblk' will list the block devices, so that you can find the encrypted device (its size might help). In my case '/dev/sda5'.
  • You can test if it is the correct device using 'sudo cryptsetup luksDump <your-block-device>', which it will list the LUKS header information.
  • You can reencrypt the LUKS volumen using 'sudo cryptsetup-reencrypt' and providing the new encryption parameters. Depending on the speed of the computer and the size of the volumen it can take time.
  • Restart the computer when it has finished, and that's all.

Post Reply

Return to “Installation & Boot”