Skip to content

Commit 5e90c7b

Browse files
authored
📝 Add examples for VG and Debian 12 in "How to install Ubuntu 24.04 with full disk encryption" (#1152)
1 parent d7322c5 commit 5e90c7b

File tree

2 files changed

+112
-2
lines changed

2 files changed

+112
-2
lines changed

tutorials/install-ubuntu-2004-with-full-disk-encryption/01.de.md

Lines changed: 56 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@ IMAGE /root/images/Ubuntu-2404-noble-amd64-base.tar.gz
7878
SSHKEYS_URL /tmp/authorized_keys
7979
```
8080

81-
> **Hinweis:** Debian 12 (`Debian-1208-bookworm-amd64-base.tar.gz`) sollte auch funktionieren — allerdings ohne Garantie.
81+
> **Hinweis:** Wenn `PART /boot/efi esp 256M` entfernt wird, sollte auch Debian 12 (`Debian-1208-bookworm-amd64-base.tar.gz`) funktionieren — allerdings ohne Garantie.
8282
8383
Diese Konfiguration installiert Ubuntu auf einem einzelnen verschlüsselten Laufwerk (`/dev/sda`) mit einer separaten unverschlüsselten `/boot` Partition, das für die Entschlüsselung benötigt wird.
8484

@@ -200,6 +200,35 @@ SSHKEYS_URL /tmp/authorized_keys
200200

201201
</blockquote>
202202

203+
<br>
204+
205+
</details>
206+
207+
<details>
208+
209+
<summary>Beispiel für Volume Group (VG)</summary>
210+
211+
<blockquote>
212+
213+
```bash
214+
CRYPTPASSWORD secret
215+
DRIVE1 /dev/sda
216+
DRIVE2 /dev/sdb
217+
SWRAID 1
218+
SWRAIDLEVEL 1
219+
BOOTLOADER grub
220+
HOSTNAME host.example.com
221+
PART /boot/efi esp 256M
222+
PART /boot ext4 1G
223+
PART lvm vg0 all crypt
224+
LV vg0 root / ext4 50G
225+
LV vg0 home /home ext4 1500G
226+
IMAGE /root/images/Ubuntu-2404-noble-amd64-base.tar.gz
227+
SSHKEYS_URL /tmp/authorized_keys
228+
```
229+
230+
</blockquote>
231+
203232
</details>
204233

205234
## Schritt 3 - Post-Installations-Skript erstellen oder kopieren
@@ -279,6 +308,32 @@ dpkg-reconfigure dropbear-initramfs
279308
update-initramfs -u
280309
```
281310

311+
<details>
312+
313+
<summary>Für Debian 12</summary>
314+
315+
<blockquote>
316+
317+
```bash
318+
#!/bin/bash
319+
320+
# System updaten
321+
apt-get update >/dev/null
322+
apt-get -y install cryptsetup-initramfs dropbear-initramfs
323+
324+
# Kopieren des SSH-Schlüssels für Dropbear und Port ändern
325+
cp /root/.ssh/authorized_keys /etc/dropbear/initramfs/
326+
sed -ie 's/#DROPBEAR_OPTIONS=/DROPBEAR_OPTIONS="-I 600 -j -k -p 2222 -s"/' /etc/dropbear/initramfs/dropbear.conf
327+
dpkg-reconfigure dropbear-initramfs
328+
update-initramfs -u
329+
```
330+
331+
</blockquote>
332+
333+
<br>
334+
335+
</details>
336+
282337
**Wichtig:** Das Post-Installations-Skript muss ausführbar gemacht werden:
283338

284339
```bash

tutorials/install-ubuntu-2004-with-full-disk-encryption/01.en.md

Lines changed: 56 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ IMAGE /root/images/Ubuntu-2404-noble-amd64-base.tar.gz
7777
SSHKEYS_URL /tmp/authorized_keys
7878
```
7979

80-
> **Note:** It should also work with Debain 12 (`Debian-1208-bookworm-amd64-base.tar.gz`) — but without guarantee.
80+
> **Note:** It should also work with Debain 12 (`Debian-1208-bookworm-amd64-base.tar.gz`) when you remove `PART /boot/efi esp 256M` — but without guarantee.
8181
8282
This configuration will install Ubuntu on a single encrypted drive (`/dev/sda`) with a separate unencrypted `/boot` required for remote unlocking.
8383

@@ -199,6 +199,35 @@ SSHKEYS_URL /tmp/authorized_keys
199199

200200
</blockquote>
201201

202+
<br>
203+
204+
</details>
205+
206+
<details>
207+
208+
<summary>Example for Volume Group (VG)</summary>
209+
210+
<blockquote>
211+
212+
```bash
213+
CRYPTPASSWORD secret
214+
DRIVE1 /dev/sda
215+
DRIVE2 /dev/sdb
216+
SWRAID 1
217+
SWRAIDLEVEL 1
218+
BOOTLOADER grub
219+
HOSTNAME host.example.com
220+
PART /boot/efi esp 256M
221+
PART /boot ext4 1G
222+
PART lvm vg0 all crypt
223+
LV vg0 root / ext4 50G
224+
LV vg0 home /home ext4 1500G
225+
IMAGE /root/images/Ubuntu-2404-noble-amd64-base.tar.gz
226+
SSHKEYS_URL /tmp/authorized_keys
227+
```
228+
229+
</blockquote>
230+
202231
</details>
203232

204233
## Step 3 - Create or copy post-install script
@@ -278,6 +307,32 @@ dpkg-reconfigure dropbear-initramfs
278307
update-initramfs -u
279308
```
280309

310+
<details>
311+
312+
<summary>For Debian 12</summary>
313+
314+
<blockquote>
315+
316+
```bash
317+
#!/bin/bash
318+
319+
# Update system
320+
apt-get update >/dev/null
321+
apt-get -y install cryptsetup-initramfs dropbear-initramfs
322+
323+
# Copy SSH keys for dropbear and change the port
324+
cp /root/.ssh/authorized_keys /etc/dropbear/initramfs/
325+
sed -ie 's/#DROPBEAR_OPTIONS=/DROPBEAR_OPTIONS="-I 600 -j -k -p 2222 -s"/' /etc/dropbear/initramfs/dropbear.conf
326+
dpkg-reconfigure dropbear-initramfs
327+
update-initramfs -u
328+
```
329+
330+
</blockquote>
331+
332+
<br>
333+
334+
</details>
335+
281336
**Important:** Make the post-install script executable:
282337

283338
```bash

0 commit comments

Comments
 (0)