I switched my OS from Windows to Ubuntu. On my Windows system I had my whole laptop encrypted so no one could access anything without the correct password. Now I have Ubuntu and TrueCrypt won't let me encrypt my whole system. I considered encrypting my whole C drive, but that wouldn't work, would it?

What are the Linux alternatives for full system encryption like the Windows version of TrueCrypt has to offer?

link|improve this question
have you taken a look at this – Raystafarian Feb 4 at 12:25
feedback

3 Answers

up vote 1 down vote accepted

If you truly want full disk encryption, you will need to install from the Ubuntu Server or Ubuntu Alternate installer. In the partitioning section, you can select full disk encryption, using LVM, dmcrypt, and LUKS.

However, the Ubuntu Desktop graphical installer supports total encryption of your entire home directory by clicking a single checkbox. When you select your username and password, you'll have an option to "require a password to login and access your home directory contents." This is a very easy, seamless approach to cryptographically protecting the private data you store in your home directory.

link|improve this answer
feedback

LUKS is probably what you're looking for. From memory, Oneiric can set this up for you during the installation process.

link|improve this answer
joernfranz.net/2011/01/20/… This is the only tutorial I understand regarding the matter. I installed Ubuntu yesterday, so I guess I don't use anything that important that I couldn't install it again. Just looking at the post-installation ecnryption instructions give me a headache. – Iiro Feb 5 at 12:27
feedback

First - You should have separate unencrypted boot partition because linux, or more precisely grub or other bootloader cannot boot from encrypted partition.
Second - it's not practical or absolutely necessary to encrypt whole drive. You should set up separate partition for /home directory and encrypt only that partition.

To encrypt your /home directory you could use ecryptfs-migrate-home command from eCryptfs project.

Guide on how to do use it

If you really need for full system encryption on linux - have you tried searching? Also it is much harder to set up full sytem encryption after installation.

link|improve this answer
Got any citations for why you think FDE isn't practcal? IMO ecryptfs isn't great because it does nothing for swap or tmo folders. Meaning you could be leaving unecryped docs available when you don't expect it. – Zoredache Feb 4 at 12:14
From my own eperience - every time I've tried FSE it slowed down file access speeds and system in general. – AndyDeGroo Feb 4 at 16:45
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.