Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

How to create separate /home partition when using full disk encryption feature in the Ubuntu 12.10 installer?

share|improve this question
    
Just to clarify: would you like to have the separate /home to be encrypted as well? And would you like a real new partition or would a separate logical volume suffice too? –  gertvdijk Jan 31 '13 at 22:43
    
> Files on '/' will not need to be encrypted. These files start up the system, > applications and system wide configuration. It will be unnecessary to hide > them, because they come with every distro. Well, as it's a corporate requirement, the choices are either do "full-disk encryption" under Linux, or chose another OS or distro that does support FDE. No excuses, no trying to talk logic. And perhaps they're right anyway. –  user141254 Mar 18 '13 at 3:11
    
@jelabarre There are reasons one might want to encrypt /. –  Eliah Kagan Mar 19 '13 at 14:01
add comment

1 Answer 1

Warning: Keep in mind what you are doing has to be done right or you may potentially destroy other systems on your hard drive or data on other partitions. If you are installing to the entire hard drive and want to overwrite the entire disk, no worries.

When you are installing, when you see this screen:

enter image description here

Choose Something else.

You will need to create the minimum of two partitions (three if you want a swap).

Create one partition for you system and set it's mount point to '/'

Create another partition for your home directory and set it's mount point to '/home'

Create a swap partition as well if you need one.

When you are asked to encrypt the /home directory, choose that option.

See this tutorial before you start this process. If you have another system installed already and want it to install beside it, make sure you back it up with remastersys or just back up your files.

share|improve this answer
    
I want to fully encrypt the hard disk including / and also have separate /home partition not just encrypt /home directory. –  Islam Dec 27 '12 at 16:25
    
Files on '/' will not need to be encrypted. These files start up the system, applications and system wide configuration. It will be unnecessary to hide them, because they come with every distro. System configuration is more than likely harmless for people to view. If you don't want people to see your applications, then do not install them from the repos, instead install the executable to your home directory and they will be encrypted. If you do that you may have to get the source code, and compile them on your own. Little learning to do there,but not too difficult. –  cxx6xxc Dec 28 '12 at 0:59
    
@cxx6xxc Actually, there are benefits to encrypting /. Information about how the system is used can be discovered by reading files in / that are not in anyone's home directory. –  Eliah Kagan Mar 18 '13 at 3:39
    
@cxx6xxc There might be confidential data on the swap partition, and at least in /tmp and /var (log files or data from a mysql etc). Also, there might be non standard software writing into other directories. If you want to be safe, full disk encryption is very useful. –  iGEL Feb 3 at 22:00
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.