As a noob to Linux I do not know if it is possible to encrypt whole drive with current calamares installer

I did a fresh install of Lubuntu with these options in calamares

erase disk +encrypt system 

When rebooting it asks :

Welcome to GRUB! Attempting to decrypt master key...  
Enter passphrase for hd0

After decrypting I have only to log in as user

Normally we have to put password under Lubuntu logon

Is in this case the complete system encrypted ? Is the grub prompt normal ?

Here is the output of lsblk

sda                                8:0    0 238,5G  0 disk  
├─sda1                             8:1    0   300M  0 part  /boot/efi
└─sda2                             8:2    0 238,2G  0 part  
                                 253:0    0 238,2G  0 crypt /
sr0                               11:0    1   3,7M  0 rom   /media/

enter image description here


Everything but /boot/efi is encrypted, yes.

This is indicated by the fact that sda2 only holds a Luks volume (which is the encryption feature used by Ubuntu and many other Linux distros), which is in turn mounted on /.

The grub prompt is perfectly normal, given that the kernels reside on an encrypted partition, and /boot/efi only contains the bootloader itself. It has to ask for passphrase to read the kernel it has to load.

  • but when i open disk utility i see 2 free space areas . why are they created and why unencrypted ? i have added picture in question. can you take a look. and how about lvm .ist it better to use lvm with full disk encryption? – zayers Jun 18 at 18:00
  • What free space to you see? The partitions adds up to the size of the disk. And LVM+LUKS is no more safe than only LUKS. LVM is a management layer, and doesn't really impact security. With your setup, you only have one partition for everything anyway, so LVM doesn't make a lot of sense. – vidarlo Jun 18 at 18:04
  • i have edited question. look at foto. there are 2 small space areas created automatically . i dont think encrypted – zayers Jun 18 at 18:08
  • There's a tiny free space in front and at the end, which is not used for anything nor encrypted. – vidarlo Jun 18 at 18:11
  • in debian installer i always used entire disk and setup encrypted lvm to encrypt whole disk ...was my setup with calamares above as whole drive encryption ? – zayers Jun 18 at 18:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.