UbuntuHelp:UbiquityEncryptedFilesystems
来自Ubuntu中文
点击翻译: |
English |
请不要直接编辑翻译本页,本页将定期与来源同步。 |
- title LVM/luks-crypto support with the Ubuntu desktop CD
{i} Please refer to EncryptedFilesystems for further documentation. |
The Desktop CD installer (ubiquity) currently does not provide support for setting up LVM or encrypted partitions. With the recipe below, the Desktop CD can be used to install Ubuntu on a previously created (optionally encrypted) LVM.
- Boot desktop CD, open terminal, and install missing packages:
apt-get install cryptsetup lvm2 sudo modprobe dm-crypt
- Now set up the LVM and crypto partitions with the command line tools. If you already have Ubuntu installed on a standard LVM-on-LUKS, this is as easy as:
sudo cryptsetup luksOpen /dev/sda4 sda4_crypt
or whichever partition is the encrypted LVM PV. This should automatically create the LVM LVs in `/dev/mapper/`.
- Start ubiquity with manual partitioning, and use the existing
partitions; keep `/home`, `boot`, etc. as they are, but make sure they are marked appropriately. For example, if your old system had a `/home` partition that was ext3, mark that partition as ext3 instead of unused and be sure to set its mount point to `/home`. Do the same the root (`/`) and boot (`/boot`) partitions in the LVM, but mark them for reformatting as well. Do not mark your `/home` partition for reformatting if you want to keep its contents. Do not reboot immediately, your system will not boot!
- Mount the newly installed target system:
sudo mount /dev/mapper/ubuntu*-root /mnt sudo chroot /mnt mount /proc sudo mount --bind /dev /mnt/dev sudo chroot /mnt mount /boot
- Create an appropriate crypttab.
echo "sda4_crypt UUID=`sudo blkid -p /dev/sda4 | cut --delimiter='\"' -f 2` none luks" | sudo tee -a /mnt/etc/crypttab
- Install a few missing packages into the target system (this will
also take care of updating the initramfs):
sudo chroot /mnt apt-get install cryptsetup lvm2 dmsetup
- Unmount the target system:
sudo umount /mnt/proc /mnt/dev /mnt/boot /mnt
- Reboot into your newly installed system.