Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hi how to install Ubuntu 12.04+ with full disk encryption including encrypted boot partition : a- to a USB drive ie. 16GB or 32GB b- to a HDD

share|improve this question
    
May I know why do you want to encrypt your boot directory, or even your / for that matter? – i08in Feb 17 '13 at 15:17
1  
@Jobin Plenty of people encrypt their home directories or their entire filesystem; this is hardly a niche case. Is this information really relevant to solving the problem? (If so, I recommend clarifying why--if not, I recommend deleting your comment and flagging mine as obsolete.) – Eliah Kagan Feb 17 '13 at 15:38
    
@EliahKagan: I am seriously not aware of any good effects encrypting your / directory can have. Encrypting your Home folder is absolutely fine, but why "/". Hope I am not rude here, please, with utmost sincerity I ask. I don't intend to turn away the attention of the asker, but let's make it clear. – i08in Feb 17 '13 at 15:47
1  
@Jobin One reason is that files outside your home directory can still reveal sensitive information. Another reason is that it's considerably harder for someone with physical access to a machine with / and /boot encrypted to modify the system maliciously. Like I said, this is not a niche situation, plenty of people do this. You may want to post a new question asking why it may make sense to encrypt / and /boot. But it's really irrelevant to the goal of answering this one particular question. – Eliah Kagan Feb 17 '13 at 15:52
    
Ok fine. That was nice of you. I'll post it sometime later, though even I really don't feel the need to post this as a question. – i08in Feb 17 '13 at 15:55

1) Download Ubuntu .iso “alternate” file from here (torrent is good)

2) Go to “How to create bootable USB

3) Download Pen Drive Linux USB installer

4) Install the Pen Drive Linux USB installer

5) Locate the .iso file you downloaded earlier

6) Install it into any USB stick

7) Follow instructions from here

share|improve this answer
1  
Welcome to Ask Ubuntu TheHelper! While providing a link is okay, it's better to include the essential parts of the steps taken in that link, or at least a brief explanation of what is happening, in case the link dies. I'm talking about the last link (step 7, which is the essential part of the answer), since the previous steps are well documented elsewhere. If you find the same steps mentioned elsewhere in the site, link that instead. – Alaa Ali Jul 19 '13 at 23:51

It can be incredibly beneficial to encrypt everything but your bootloader; obviously, your bootloader must remain cleartext. One answer here suggests to use the alternate installer to encrypt almost everything, but include unencrypted content on the internal hdd. This invites an "Evil Maid" attack: during a period when your computer is physically insecure an attacker may modify passphrase collection to store/send your key.

I have found the best approach makes use of special GRUB features for FDE, with GRUB installed on a USB. Detailed instructions here and here may be found for Archlinux, but the processes are easy to adapt and combine for your purposes.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.