Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place! |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
06-27-2020, 12:07 AM
|
#1
|
LQ Newbie
Registered: Jun 2020
Posts: 4
Rep: 
|
Need recommendation on encrypting a dual boot drive
Hi.
I want to encrypt NVMe/SSD drive. I'd like to know if I should perform full disk encryption instead of encrypting each OS separately. I want to have a dual boot laptop for Windows 10 and Linux OS (preferably Mint or Ubuntu). If I'm only using Windows 10, I'll just use Bitlocker (tried before) or VeraCrypt. The main OS will be Windows 10 home (will be used by other members of the family). It's a new laptop with AMD processor. I still want to access my files on Windows under "C:\Users" when I'm using Linux and I also want to access my Linux files when I'm using Windows. Sometimes there are files that I leave on "downloads" folder in both operating systems. I share the laptop with other people at home and they will have their own user account on Windows only.
I also want to create a logical partition or logical drive on Windows 10. It's for common files like that we can share.
Based on the Windows 10 Disk Management, the current disk has EFI system partition (disk 0, partition 1), Drive C (boot, Windows 10) and recovery partition (disk 0, partition 4). It was setup this way when I received the laptop. Type is "basic" disk. Partition style is GPT.
I'm planning to use an external drive to backup my data. I'm also planning to encrypt it.
I have tried dual booting Windows and Linux few times but without encryption. Need some guidance on encrypting both OS.
Suggestions please?
|
|
|
06-27-2020, 10:05 AM
|
#2
|
Member
Registered: Jul 2019
Location: Europe
Distribution: Slackware64-current
Posts: 220
Rep: 
|
You need to encrypt the operating systems and not the full disk.
Linux needs an unencrypted boot partition and the filesystems and tools to encrypt/decrypt them are too different anyway.
Regarding an external disk: if you want to use it with Linux AND Windows you can encrypt it with Veracrypt and format it with NTFS. IN this case both Windows and Linux will be able to use it.
Last edited by z80; 06-27-2020 at 10:07 AM.
|
|
|
06-27-2020, 12:39 PM
|
#3
|
LQ Newbie
Registered: Jun 2020
Posts: 4
Original Poster
Rep: 
|
Can I still access Window's My Documents from Linux and vice versa?
Thanks.
Quote:
Originally Posted by z80
You need to encrypt the operating systems and not the full disk.
Linux needs an unencrypted boot partition and the filesystems and tools to encrypt/decrypt them are too different anyway.
Regarding an external disk: if you want to use it with Linux AND Windows you can encrypt it with Veracrypt and format it with NTFS. IN this case both Windows and Linux will be able to use it.
|
|
|
|
06-27-2020, 01:32 PM
|
#4
|
Member
Registered: Jul 2019
Location: Europe
Distribution: Slackware64-current
Posts: 220
Rep: 
|
Yes, provided you encrypt the Windows 10 partition with a method / tool that Linux can decrypt.
I'm only aware of Veracrypt / Truecrypt but others might exist.
BTW: I did that in the past before completely getting rid of Windows (2 years ago).
Edited to add:
I'd rather use a dedicated partition for your documents, so you don't (accidently) mess with the Windows system folders from within Linux.
Last edited by z80; 06-27-2020 at 01:37 PM.
|
|
|
06-27-2020, 11:18 PM
|
#5
|
LQ Newbie
Registered: Jun 2020
Posts: 4
Original Poster
Rep: 
|
I haven't decided yet if I will create separate partitions for these but is there any partition that I should not encrypt?
bin/ dev/ home/ lib/ misc/ opt/ root/ tmp/ var/
boot/ etc/ initrd/ lost+found/ mnt/ proc/ sbin/ usr/
Quote:
Originally Posted by z80
Yes, provided you encrypt the Windows 10 partition with a method / tool that Linux can decrypt.
I'm only aware of Veracrypt / Truecrypt but others might exist.
BTW: I did that in the past before completely getting rid of Windows (2 years ago).
Edited to add:
I'd rather use a dedicated partition for your documents, so you don't (accidently) mess with the Windows system folders from within Linux.
|
|
|
|
06-28-2020, 12:08 AM
|
#6
|
LQ Veteran
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,437
|
There is no (little at best) point in encrypting anything except /home - and as pointed out, it might only be a subset, say /home/bboyukoy/Documents.
Make sure it doesn't hold files you want to share with your other users, else they will need to know your (secret) passphrase.
|
|
|
06-28-2020, 01:03 AM
|
#7
|
LQ Newbie
Registered: Jun 2020
Posts: 4
Original Poster
Rep: 
|
Thanks.
Would you recommend encrypting Windows first before partitioning the disk and install Linux in another partition and encrypt it too?
|
|
|
06-28-2020, 03:09 AM
|
#8
|
LQ Veteran
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,437
|
No. I'm a great believer in KISS.
Resize the Win partition(s) first, and leave the space unallocated for later Linux install. Then encrypt the Win partition(s) as needed then install Linux. I've never looked at veracrypt, so z80 will be able to advise you there - I believe it shouldn't matter where you encrypt the shared partition from, but I'm happy to be correcterd.
|
|
|
06-30-2020, 01:40 PM
|
#9
|
Member
Registered: Jul 2019
Location: Europe
Distribution: Slackware64-current
Posts: 220
Rep: 
|
If you use Veracrypt I'd suggest to encrypt the Windows partition from within Windows.
Then install and encrypt Linux using LUKS (you can't access the Linux filesystem from Windows anyway) and finally install Veracrypt on Linux to mount the Windows partitions.
Edited to fix typos
|
|
|
All times are GMT -5. The time now is 04:34 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|