- Use existing EFI partition
- Create a new 750MB boot partition (not encrypted)
- Create a root partition.
- Setup encryption
cryptsetup formatLuks /dev/nvme0n1p6
cryptsetup open /dev/nvme0n1p6 cryptroot
mkfs.ext4 /dev/mapper/cryptroot
- install ubuntu as usual, choosing the ext4 /dev/mapper/cryptroot as "/"
jmandel@morel:~$ ls -l /dev/disk/by-uuid/
total 0
lrwxrwxrwx 1 root root 11 Aug 1 2016 2ef28426-4015-4358-8ce1-d37bfdc5a85a -> ../../loop0
lrwxrwxrwx 1 root root 15 Aug 1 2016 484C22294C22126C -> ../../nvme0n1p3
lrwxrwxrwx 1 root root 15 Aug 1 2016 6A16D70316D6CF67 -> ../../nvme0n1p4
lrwxrwxrwx 1 root root 10 Aug 1 2016 7fb38066-ceca-46ea-be26-6a264db4f2ca -> ../../dm-0
lrwxrwxrwx 1 root root 15 Aug 1 2016 8818cd93-fa67-4108-b985-5fd4571ca049 -> ../../nvme0n1p5
lrwxrwxrwx 1 root root 15 Aug 1 2016 b224c57d-4bdd-423f-8b3e-1b93ec3016f1 -> ../../nvme0n1p6
lrwxrwxrwx 1 root root 15 Aug 1 2016 B4EA-B00B -> ../../nvme0n1p1
mount /dev/mapper/cryptroot /mnt
mount /dev/nvme0n1p3 /mnt/boot
mount /dev/nvme0n1p1 /mnt/boot/efi
cd /mnt
mount -t proc proc proc/
mount -t sysfs sys sys/
mount -o bind /dev dev/
mount -t devpts pts dev/pts/
echo "cryptroot /dev/disk/by-uuid/8818cd93-fa67-4108-b985-5fd4571ca049 none luks" > /etc/crypttab
logout
reboot
