3 ms·

During installation, I tick the box that says 'full disk encryption'.

• wheelerwj 8y ago
  this. it was the easiest thing ever.
  • ergo14 8y ago
    Only if you want to have a single partition :( If you want to have separate ones you have to do manual dance around luks. I'd wish it was easier to set up for multiple partitions.
    • dmm 8y ago
      Use a single partition as an lvm physical volume. Then you can have as many partitions in that as you want. This is what the Debian installer does by default if you select disk encryption.
      • ergo14 8y ago
        Its been a while since I used Debian - need to check that out. In ubuntu currently when you select FDE it partitions things on its own. If you want separate /home you need to create LVM layout by hand before you start the installer an update grub/crypt setup after install is done.
    • dopeboy 8y ago
      I just ran into this when I installed ubuntu and wanted to preserve dual boot. Definitely more room for improvement on the "Just Works" front here.
• jusssi 8y ago
  Which distro are you using? The last I tried with Ubuntu, it "just didn't work", i.e. failed with very unhelpful error message. Bonus points if it's possible to install to a partition in existing FDE container (saves a /home backup-restore external drive round trip).
  • Faaak 8y ago
    Works well for me on Ubuntu 18.04 and 18.10
  • rkangel 8y ago
    Works well for me in Fedora (28 and 29).
• jstanley 8y ago
  OP specifically stated: > I know you can do FDE with LUKS but would prefer a more enterprise solution where I can store a recovery key centrally that a user can’t remove.
  • mrkeen 8y ago
    OP may have stated LUKS, but the Ubuntu installer doesn't. https://i.stack.imgur.com/6Heoq.png https://i.stack.imgur.com/6Heoq.png
    • deleted 8y ago
      [deleted]