Hello,
ROME or Rock
Plasma 5 or 6
Trying to use LUKS with Calamares install of ROME or Rock results in this:
If people are using LUKS in OMLx installation how does one get it to work?
From what I remember in the past, and it has been awhile, luks is not good for multi-boot Linux boxes.
Hi @ben79
I don’t use LUKS directly but sometime LVM+LUKS. The fastest way is to create the LUKS volume and partitions before to start the installations and do not format them directly from Calamares.
I’ll give that a try. What I actually think I want to do is encrypt a Data partition on a multi-boot computer. I have been mounting this partition in my current 4 OMLx systems (Rock, Rome P5&6, Cooker). But I would also like to know how to make this work for encrypting root or / and /home for users benenfit.
Also wondering if one can use LUKS or LVM+LUKS in multi-boot situation.
I suppose so, even if I never tried in a multiboot environment.
If you would like encrypt / partition and you would like to unlock LUKS2 partition automatically from grub you should use some tricks but finally it works (I tested in with ROME some months ago).
LUKS+LVM is useful if you would like to encrypt the whole disk with just one key and keep /, /home and swap partition independent. Calamares has an heuristic behavior with LVM (basically it could support it, but it does not), at least with OM because it release all LVM vlume groups after the partition selection window but does not re-activate them before to start the copy of the files (in fact it installs the system in a tempopary direcory and it fails with a stange error). The workaund is to run the vgchange -ay command manually from a terminal just before Calamares starts the installation. Usually after some try I succeed to do it at the right moment.
Some success:
For this test I used Manual Partitioning. Created:
/boot/efi with boot flag enabled, not encrypted/boot not encrypted/ in that window checked the box to encrypt that partition.So only / is encrypted. More testing to do. Need to determine if unencrypted /boot is necessary or if one could just create unencrypted /boot/efi and encrypted /. Then need to determine if one can use separate / and /home both encrypted.
OK, I have done a succesful install with encrypted / and /home using ROME Plasma6 x86_64 ISO. How to install OMLx with encrypted / and /home
There may be other ways to do this but I have something I believe will Work_For_Me. And this should also work for other users as well.
Edit: This so far has been done in VirtualBox. I do not really see the need to have encryption in VBox. So for me personally the next goal is to see if this works on my laptop in a multi-boot scenario.
Hi Ben, your post made me want to repeat your experience.
So on an empty partition of an “old” notebook (not as old as me).
(Laptop System: TOSHIBA product: SATELLITE C55-A-1P6
dual core Intel Core i5-4200M
Intel 4th Gen Core Processor Integrated Graphics driver: i915
NVIDIA GF117M [GeForce 610M/710M/810M/820M / GT620M/625M/630M/720M])
The first attempt made with
/boot (encrypted)
crashed calamares.
Second attempt splitting into:
/boot → ext4 (not encrypted)
/ → btrfs (encrypted)
/home → btrfs (encrypted)
/boot/efi → the one already present was kept
After a generic security warning (ignored) the installation was successful.
The notebook now has 3 systems:
itemlinux mint 21.3
rosa plasma5 12.5.1
openmandriva plasma6 24.07 (encrypted).
Thanks, I enjoyed it.
$ df
File system 1K-blocchi Usati Disponib. Uso% Montato su
tmpfs 803816 1680 802136 1% /run
/dev/sda4 94850048 27299340 66084884 30% /
tmpfs 4019076 0 4019076 0% /dev/shm
tmpfs 5120 4 5116 1% /run/lock
/dev/sda1 306572 9300 297272 4% /boot/efi
/dev/sda2 51489792 651800 48737032 2% /home
/dev/sda3 51437568 1189044 48181612 3% /var
tmpfs 803812 100 803712 1% /run/user/1000
/dev/dm-0 97463300 35848 95318072 1% /media/bruno/home-oma
/dev/dm-1 46077952 3826700 42076052 9% /media/bruno/oma