I've just finished setting up LUKS encryption on new install of Mint 18.3. I mainly followed the steps in this guide (only doing the system #1 setup however as this is the sole OS on this system).
My setup has
swap on my SSD, and
/home on a HDD, so I've added in the extra steps to set up LUKS encryption both on:
- A partition on my SSD that I created logical volumes for
/. I called this 'encrypted_ssd'.
- A partition on my HDD that only holds
/home. I called this 'encrypted_hdd'.
During install I also checked the box to encrypt /home, and I followed the post install steps to mount them all properly and set up both encrypted_ssd and encrpted_hdd in my crypttab.
As far as I can see, I've followed the same steps for the hdd and ssd encrypted partitions. However when I boot into my install, it only asks me for a password to decrypt 'encrypted_ssd'. Is there a reason why it's not asking me to decrypt my 'encrypted_hdd' partition? Does the fact that the passwords are the same, or that I chose to encrypt my
/homeduring install make a difference here?
Is a way to check that my
/home is encrypted or not?
Here's what my crypttab looks like (cryptswap1 was already in my crypttab before I added the other lines):
cryptswap1 UUID=b6b9ac2c-6bd8-4689-bc43-9ed53ec305c7 /dev/urandom swap,offset=1024,cipher=aes-xts-plain64 # <target name> <source device> <key file> <options> encrypted_ssd /dev/nvme0n1p3 none luks encrypted_hdd /dev/sda1 none luks
My partition setup is:
On nvme0n1 (ssd) p1: efi p2: /boot p3: encypted_ssd On sda (hdd) 1: encrypyed_hdd