I would like to have a disk that:

  • has Ubuntu installed
  • is fully encrypted
  • is setup in such a way as to make denial of the existence of the Ubuntu install plausible

Truecrypt provides the last two features but only for Windows: http://www.truecrypt.org/docs/?s=sys-encryption-supported-os

The alternate installer for Ubuntu provides the first two features but not the last.

I imagine that plausible deniability would be achieved by, at least:

  • Having two installs of Ubuntu and 2 passphrases (or keyfiles) which would unencrypt each one.
  • Moving any unencrypted data (such as /boot) onto a USB stick

Are there any programs out there which support this feature set for Ubuntu?

  • Why would you want to deny that you have Ubuntu installed? The purpose of the plausible deniability is to hide your data.
    – psusi
    Apr 10, 2012 at 2:17
  • 1
    @psusi What is the difference? What procedure are you aware of that allows plausible deniability for encrypted data but not the OS under which that data is written? Apr 10, 2012 at 8:10

1 Answer 1


Check this out:


I don't see why you wouldn't be able to use the above tutorial but for an additional OS installed in the free space (under cryptsetup - as described in the tutorial - which does not create a LUKS header) left after installing your main decoy OS.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.