Tag: 10.04

How I installed Kubuntu 10.04 (Lucid Lynx) on an HP Mini 110 with full disk encryption

Get a USB drive and make a boot disk from the kubuntu 10.04 CD image as detailed here: https://help.ubuntu.com/community/Installation/FromUSBStick
Be sure to select persistent storage, “When starting up from this disk, documents and settings will be: ‘Stored in reserved extra space'” I allocated approx 1GB of space for this (You’ll need more than the default 128MB.)

Use the ethernet connection on the netbook to connect it to the internet. Power it on, and as soon as you see the first screen, hit . Select your USB drive as the boot device.
Once booted, run:
sudo apt-get update
sudo apt-get dist-upgrade
sudo apt-get install cryptsetup lvm2

then reboot the netbook (from USB again)

Create the following partitions (I prefer cfdisk to partition)

  • /dev/sda1, 512MB, ext2 (primary partition, bootable)
  • /dev/sda2, remainder of space, (Pri/Log partition)
  • /dev/sda5, entire logical partition, (Logical partition in sda2)

Setup your encrypted volumes:
cryptsetup -y --cipher aes-xts-plain --key-size 512 luksFormat /dev/sda5
cryptsetup luksOpen /dev/sda5 pvcrypt
pvcreate /dev/mapper/pvcrypt
vgcreate laptop-vg /dev/mapper/pvcrypt
lvcreate -n swap -L 3G laptop-vg
lvcreate -n root -l 100%FREE laptop-vg
mkswap /dev/mapper/laptop-vg-swap
mkfs.ext3 /dev/mapper/laptop-vg-root

Start the installer (from the icon on the desktop) and choose to setup the partitions manually:

  • set /dev/sda1 to be /boot
  • set /dev/mapper/laptop-vg-root to be /
  • set /dev/mapper/laptop-vg-swap to be swap space

After the install is complete, do the following before rebooting
mkdir /mnt/newroot
mount /dev/mapper/laptop--vg-root /mnt/newroot
mount /dev/sda1 /mnt/newroot/boot
mount --bind /dev /mnt/newroot/dev
chroot /mnt/newroot
mount -t proc proc /proc
mount -t sysfs sys /sys
apt-get update
apt-get install cryptsetup lvm2

Then edit /etc/crypttab and add the following line to the end of the file:
pvcrypt /dev/sda5 none luks,retry=1,lvm=laptop-vg

Next, edit /etc/initramfs-tools/modules and add the following lines:
dm-crypt
aes-i586
xts
sha512_generic
ahci

Then run
update-initramfs -u

and reboot

In order to get my mic external speakers working (headphones worked fine), I had to:
apt-get install linux-backports-modules-alsa-lucid-generic