search

linuxmint / mint20-beta

BETA Bug Squah Rush
20 stars 8 forks source link

Full disk encryption not working without Internet connection #186

Closed mnnguyen closed 4 years ago

mnnguyen commented 4 years ago

It seems an Internet connection is required to download and install cryptsetup-initramfs package if you planned to install linuxmint 20 with full disk encryption with LUKS (see /lib/partman/finish.d/70crypto_aptinstall, line 13) This package was not required in linuxmint 19.3. Without the cryptsetup-initramfs, the dialog box to enter the passphrase is missing and fallback to initramfs shell. On Ubuntu 20.04, the cryptsetup-initramfs package is installed on the liveCD. Maybe a warning in the release notes should be suffice.

kkittykait commented 4 years ago

We need an internet connection to install Mint? That would be bad

clefebvre commented 4 years ago

Ah, it was removed because of https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1802617. We disabled swap encryption in home dir scenarii so we might be able to put it back. I'll test to make sure.

kkittykait commented 4 years ago

Can we have a custom LVM partition setup within LUKS encrypted? (including swap)

This would be a deal breaker for me if I could not

genbushi commented 4 years ago

verified, this resolves #19. @mnnguyen wins the internet on this day, thank you. This no doubt also saved a lot of post-release issues too.

kkittykait commented 4 years ago

I don't like the idea of having to have an internet connection to install an OS (and one that has yet to be locked down and secured and configured at that, that comes post install)

clefebvre commented 4 years ago

OK, the first battery of tests came back successful.

LVM + encryption now works after an offline installation ecryptfs installation also still works successfully

It looks good. This is likely to be fixed in the stable ISO.

clefebvre commented 4 years ago

We might bump into https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1802617 when we work on the upgrade path though, but we can look into that later.