albertma789's questions

I am running Ubuntu 20.04. When I made a fresh installation I have chosen to encrypt the entire disk with LUKS and selected all the default settings.

%>lsblk
sda                     8:0    0 931.5G  0 disk  
├─sda1                  8:1    0   512M  0 part  /boot/efi
├─sda2                  8:2    0   732M  0 part  /boot
└─sda3                  8:3    0 930.3G  0 part  
  └─sda3_crypt        253:0    0 930.3G  0 crypt 
    ├─vgubuntu-root   253:1    0 929.3G  0 lvm   /
    └─vgubuntu-swap_1 253:2    0   976M  0 lvm  

After using the system for a few months, I would like to make the following changes:

1 - remove vgubuntu-swap_1 because I already have a swapfile in /

2 - expand vgubuntu-root to use all space available in sda3_crypt

3 - shrink sda3 by 4GB

4 - expand sda2 by 4GB

I have an Ubuntu 20.04 live USB but I am uncertain how these steps could be done without killing my system. The reason I want a bigger sda2 is because I want to store a few ISO in this partition such that GRUB can boot directly to those (eg. Clonzilla, Gparted) without touching my encrypted partition.

My objective is to create a bootable Ubuntu system (full installation) on a LUKS-encrypted UBS drive. The version I am trying to install is Ubuntu 18.04

I followed this guide Full_Disk_Encryption_Howto_2019 , step by step without any error/warning. The installation drive I selected is a blank 64GB USB drive. After installation is completed and followed the post-installation guide, the USB drive won't boot with a "Operating System Not Found" error.

Next, I try to use the default installation while selecting "Erase disk and install Ubuntu", "Encrypt the new installation for security" and "use LVM for the new Ubuntu installation" and accepted all default setting while selecting my USB drive as the destination. After installation was successful, I tried to boot the USB drive but an error "System BootOrder not found. Initializing defaults" is displayed and I was redirected to the bare GRUB prompt. I checked the USB disk and I can unlock it by typing my password. The file structure looks normal but somehow I cannot boot it.

Did anyone try to do the same thing and succeeded? Any help is much appreciated.

I have 2 machines (machine1 & machine2) both running Ubuntu 18.04. Both machines use fscrypt to encrypt the home folder (using login passphrase). If I remove the hard disk (hd1) from machine1 and plug it into machine2, how do I decrypt the home folder of machine1?

Assuming hd1 is sdb and mounted to /mnt/hd1/ The following commands are run as user2 from machine2

>>> fscrypt status

filesystems supporting encryption: 2
filesystems with fscrypt metadata: 2

MOUNTPOINT           DEVICE       FILESYSTEM  ENCRYPTION     FSCRYPT
/                    /dev/sda2    ext4        supported      Yes
/mnt/hd1             /dev/sdb2    ext4        supported      Yes


>>> fscrypt status /mnt/hd1/
ext4 filesystem "/mnt/hd1" has 1 protector and 1 policy

PROTECTOR         LINKED  DESCRIPTION
7db5baf4xxxxxxxx  No      login protector for user1

POLICY            UNLOCKED  PROTECTORS
0000ed45xxxxxxxx  No        7db5baf4xxxxxxxx


>>> fscrypt unlock /mnt/hd1/home/user1
fscrypt unlock: user keyring not linked into session keyring

This is usually the result of a bad PAM configuration. Either correct the problem in your PAM stack, enable
pam_keyinit.so, or run "keyctl link @u @s".

>>> fscrypt unlock /mnt/hd1/home/user1 --unlock-with=/mnt/hd1:7db5baf4xxxxxxxx
fscrypt unlock: user keyring not linked into session keyring

This is usually the result of a bad PAM configuration. Either correct the problem in your PAM stack, enable
pam_keyinit.so, or run "keyctl link @u @s".

Must I unlock the home folder of user1 only if I am logged-in as user1? Can user2 unlock the home folder if he has user1's login passphrase? Can it be done from a different machine?

hello I am using the latest ubuntu 18.04 on a Surface Pro 3. How can I connect both a wired headphones and bluetooth headphones at the same time and play audio to both?

uname -a
Linux Surface-Pro-3 4.15.0-51-generic #55-Ubuntu SMP Wed May 15 14:27:21 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

lspci
00:00.0 Host bridge: Intel Corporation Haswell-ULT DRAM Controller (rev 09)
00:02.0 VGA compatible controller: Intel Corporation Haswell-ULT Integrated Graphics Controller (rev 09)
00:03.0 Audio device: Intel Corporation Haswell-ULT HD Audio Controller (rev 09)
00:14.0 USB controller: Intel Corporation 8 Series USB xHCI HC (rev 04)
00:16.0 Communication controller: Intel Corporation 8 Series HECI #0 (rev 04)
00:1b.0 Audio device: Intel Corporation 8 Series HD Audio Controller (rev 04)
00:1c.0 PCI bridge: Intel Corporation 8 Series PCI Express Root Port 3 (rev e4)
00:1f.0 ISA bridge: Intel Corporation 8 Series LPC Controller (rev 04)
00:1f.2 SATA controller: Intel Corporation 8 Series SATA Controller 1 [AHCI mode] (rev 04)
00:1f.3 SMBus: Intel Corporation 8 Series SMBus Controller (rev 04)
01:00.0 Ethernet controller: Marvell Technology Group Ltd. 88W8897 [AVASTAR] 802.11ac Wireless

Just wondering if I use ecryptfs to encrypt my /home folder

sudo ecryptfs-migrate-home -u username

Can another user with root privilege change my password, then login my account using the new password see my encrypted /home?

If I change my own password, I suppose I can still access my encrypted /home , how is it different from root changing my password and login as me?