Public bug reported:

In today's world, especially with the likes of the EU's GDPR and the
many security fails, Ubuntu installer needs to support full-system
encryption out of the box.

This means encrypting not only /home but also both root and /boot. The
only parts of the system that wouldn't be encrypted are the EFI
partition and the initial Grub bootloader, for obvious reasons.

Using LUKS and LVM, it is already possible...

https://help.ubuntu.com/community/ManualFullSystemEncryption

... but with one major limitation: Grub is incorrectly changed after an
update affecting the kernel or Grub, so that a manual Grub update is
required each time this happens (this is fully covered in the linked
instructions).

If the incorrect Grub change is fixed, it should be (relatively) simple
to support full-system encryption in the installer.

** Affects: ubiquity (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: encryption installer luks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1773457

Title:
  Full-system encryption needs to be supported out-of-the-box

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1773457/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to