Home / ubuntu / Questions / 1255724
Accepted
gumlozol
Asked: 2020-07-03 06:08:39 +0800 CST

Ubuntu 20.04 autoinstallation LUKS

  • 772

Since I'll have to deal with Ubuntu clients mass deployments in the future, I was searching for methods to achieve an unattended setup. My current idea is to use something like kickstart or https://ubuntu.com/server/docs/install/autoinstall and to use ansible after the initial deployment.

One key requirement would be to encrypt the root partition during the setup.

Since autoinstallation seems to be the new standard for 20.04 and I didn't find anything concerning LUKS in the reference, I wanted to ask if someone knows whether LUKS can be used with autoinstallation?

If not: would kickstart be the way to go?

automation luks kickstart 20.04

1 Answers

  1. Best Answer

    Creating an answer - thanks @Kulfy for your remark.

    Solved by going through the interactive installer. After that, the yaml was available under /var/log/installer:

    As far as the storage section is concerned, the file contained the following lines:

    storage:
    config:
    - {ptable: gpt, serial: LITEONIT_LCS-128M6S_2.5_7mm_128GB_TW032GYJ550854163694,
      path: /dev/sdb, wipe: superblock, preserve: false, name: '', grub_device: false,
      type: disk, id: disk-sdb}
    - {device: disk-sdb, size: 536870912, wipe: superblock, flag: boot, number: 1,
      preserve: false, grub_device: true, type: partition, id: partition-0}
    - {fstype: fat32, volume: partition-0, preserve: false, type: format, id: format-0}
    - {device: disk-sdb, size: 1073741824, wipe: superblock, flag: '', number: 2,
      preserve: false, type: partition, id: partition-1}
    - {fstype: ext4, volume: partition-1, preserve: false, type: format, id: format-1}
    - {device: disk-sdb, size: 126422614016, wipe: superblock, flag: '', number: 3,
      preserve: false, type: partition, id: partition-2}
    - {volume: partition-2, key: 'safekey', preserve: false, type: dm_crypt, id: dm_crypt-0}
    - name: ubuntu-vg
      devices: [dm_crypt-0]
      preserve: false
      type: lvm_volgroup
      id: lvm_volgroup-0
    - {name: ubuntu-lv, volgroup: lvm_volgroup-0, size: 4294967296B, preserve: false,
      type: lvm_partition, id: lvm_partition-0}
    - {fstype: ext4, volume: lvm_partition-0, preserve: false, type: format, id: format-2}
    - {device: format-2, path: /, type: mount, id: mount-2}
    - {device: format-1, path: /boot, type: mount, id: mount-1}
    - {device: format-0, path: /boot/efi, type: mount, id: mount-0}

    I've also successfully used the generated lines in an unattended setup.

    • 3