Home / ubuntu / Questions / 1056335
Accepted
PerlDuck
Asked: 2018-07-16 05:56:31 +0800 CST

Will an external HDD encrypted with 17.10 be accessible with 18.04 after an upgrade?

  • 772

I'm currently on 17.10 and don't use encryption on my internal drives but have an external USB disk which is encrypted. I use it for backups.

Because I am was not sure whether I use ecryptfs or cryptsetup I show the steps it took to set up the external disk:

  1. Activities → Disks → Select drive → Create Partition → Format Volume:

  2. Enter Password (twice) → Create

When I plug in the HDD, Ubuntu prompts me to enter the passphrase and then mounts it. It works like a charm and I'm able to write my backups to that external disk. There are no .Private folders and no other files besides the one I put there (plus the lost+found folder). For illustration I used a 4GB stick here but the steps were the same with the actual disk.

From some comments I learned this happens to be cryptsetup then and not ecryptfs.

What will happen when I upgrade to 18.04? Given 18.04 doesn't support encryption by default, I'm afraid I cannot restore my backups any longer.

Will it make a difference when I don't upgrade but do a fresh install?

encryption external-hdd luks cryptsetup 18.04

3 Answers

  1. Best Answer

    You should have no trouble mounting the external drive as long as you have cryptsetup:

    sudo apt install cryptsetup

    Once this is installed you will be able to mount the drive via file browser.

    • 5

  2. You are using LUKS so Ubuntu is using cryptsetup behind the scene. Normally, encrypted volumne with LUKS should still work after an upgrade unless the default encryption method has changed.

    There was a time many years ago, the default aes-cbc-plain was changed and that causes some drives not to mount unless the old encryption method is specifed explicitly. There is no such change between 17.10 and 18.04, so your situation should be okay.

    NB: In Ubuntu 18.04, cryptsetup should came installed by default but if you wish to use cryptsetup as a command line tool in bash, you should install cryptsetup-bin

    sudo apt-get install cryptsetup-bin
    • 3

  3. I recommend that you boot a live system with Ubuntu 18.04 and simply try it out.

    In any case you don't need to worry about data loss between releases, installations, or systems since with LUKS all the necessary parameters are stored in the volume header. Just make sure that cryptsetup is installed and don't lose your passphrase and/or key files!

    If Ubuntu 18.04 lacks an auto-mount feature that asks for a decryption key upon device connection please ask a new question and I'm sure we can cook up some Udev magic to replicate this feature.

    • 1