I've been googleing for a bit and can not find an answer yet

Im from a FreeBSD background, so you will have to forgive me a little

I am trying to dual boot FreeBSD and Ubuntu

I want to set up a completely encrypted installation, including /boot
I have looked at the GRUB2 modules and there is crypt and lvm, so GRUB should (hopefully) be able to unlock the encrypted partition

I have set up my disk as follows (In a VBox session, until I get everything working, then it will be on the real drive)

sda 100Gb
sda1 100Mb (EFI)
sda2 8Gb (FreeBSD Swap)
sda3 8Gb (FreeBSD zfs boot)
sda4 40G (FreeBSD zfs root)
sda5 43.9G (Ubuntu LVM crypt)

vg-swap 8Gb
vg-root 35.9Gb

From what I've read, if doing something unusual, many people suggest using the Alternative Installer image, but I cant find one for Ubuntu 16.

I've tried Ubuntu 16.04 desktop image, but the GUI installer will not let me install with an encrypted boot and is insisting that /boot must be on a none encrypted partition.

Does this mean that the only way I can have an encrypted boot in to install via the CLI? I did find debootstrap, but haven't figured out how to get GRUB to play nice with an encrypted boot. I am trying to get GRUB (on the EFI partition) to unlock the crypt container and boot the linux kernel
I have not managed to test debootstrap yet (because of my GRUB issues).

Is debootstrap the best way to achieve what I want?
Does anyone have any pointers to getting GRUB to play nice?

Thanks in advance

So I'm a bit further forwards

I get GRUB to unlock the cryto parition and call initramfs

initramfs fails to complete with
Volume Group "vg" not found
Cannot process volume group vg

I can do
cryptsetup luksOpen /dev/sda5 lvm
vgchange -ay

That will allow the OS to continue on loading

So now to figure out how to have initramfs call cryptsetup on it's on

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.