Score:0

full disk encryption how to ubuntu 20.04

ng flag

the current article about FDE at help.ubuntu takes Ubuntu 18.04 into account, which in turn does not contain some required modules for encrypting the first-stage GRUB boot-loader files. So i would like to know how to encrypt it, or some other up-to-date article

quoted from the previously linked article:

In both cases the first-stage GRUB boot-loader files are not (and cannot) be encrypted or protected through cryptographic signatures in BIOS boot mode.

It is possible, in UEFI Secure Boot mode, to have every stage cryptographically signed, in which case any tampering can be detected and boot aborted. Unfortunately, Canonical (who control the building of the packaged signed GRUB UEFI boot-loader) did not include the encryption modules in their signed GRUB EFI images until the release of 19.04 Disco. See bug #1565950.

user535733 avatar
cn flag
That article is written by the community. It won't be updated unless community participants step up and do so. Volunteers experienced with Full Disk Encryption are welcome to help by sharing what they know; to start picking at it with small improvements.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.