Ubuntu with Disk Encryption
From Notes_Wiki
Home > Microsoft Intune > Ubuntu with Disk Encryption
Ubuntu with Disk Encryption
Overview
Ubuntu supports full-disk encryption during installation, protecting data at rest with LUKS (Linux Unified Key Setup). This ensures only authorized users with the encryption passphrase can access system data.
Prerequisites
- Ubuntu ISO (latest LTS recommended, e.g., 22.04).
- Bootable USB installer.
- Backup of important data.
Steps
1. Download Ubuntu ISO
- Get from official Ubuntu download page.
- Create bootable USB with Rufus (Windows) or Startup Disk Creator (Linux).
2. Boot from Installation Media
- Insert USB and reboot system.
- Select Try or Install Ubuntu.
3. Start Installation
- Click Install Ubuntu.
- Select keyboard layout.
4. Configure Installation Options
- Recommended:
- Normal installation
- Install third-party software
5. Select Installation Type
- Choose: Erase disk and install Ubuntu.
- Enable: Encrypt the new Ubuntu installation for security.
6. Set Encryption Options
- Enter strong encryption passphrase.
- Optional: enable secure erase.
- Choose LVM for flexible partitioning.
7. Complete Installation
- Select time zone.
- Create a user account.
- Wait for installation to complete and restart.
8. Boot with Encryption
- On restart, system prompts for encryption passphrase.
- After entry, Ubuntu boots normally.
Notes
- Disk encryption is irreversible without reinstalling.
- Backup data before installation.
- Modern CPUs minimize encryption performance impact.
- Recommended for laptops, mobile workers, and sensitive environments.
