I would like to install Ubuntu on a two-disk RAID 1 with dm-integrity and LUKS2-encryption.
Unfortunately, neither Ubiquity, nor the alternative textmode-installer offer such a solution.
Although this seemed simple to do manually, I haven't been able to install the system, yet.
The layout for both drives was as follows:
/dev/sdX1
[ext2] to be used as unencrypted/boot
/dev/sdX2
[unformatted] to be configured in LVM for encrypted/root
&swap
I formatted both drives on a live system in gparted
and then executed cryptsetup luksFormat --type luks2 --integrity hmac-sha256 /<device>/<partition>
for either drive as a basis in order to create the RAID device, LVM and filesystem on top of later in the manual installer.
However, the manual partitioner does not recognise the encrypted partitions and I can't continue to work with them.
How can I "open" the encrypted partitions to set them up for the system installation without re-formatting them first?
Is there anything else that needs to be considered with this approach? Does Ubuntu demand certain LUKS-parameters or is something advisable to use for this purpose?
Do I have to manually add the devices to a file after the installation to be corrctly decrypted at boot? Is the --integrity
option used automatically?
Is this even the best approach or is there another way to accomplish this? (Excluding the usage of Btrfs/ZFS filesystems)