How to install PCLinuxOS 2011.6 on an encrypted LVM file system

Encryption Key on PCLinuxOS 2011.6

The 2011 editions of PCLinuxOS have started rolling off the shelves, with the KDE and LXDE editions being the first set out. (See PCLinuxOS 2011.6 KDE review for a detailed review of the KDE edition.) If you have been using PCLinuxOS, you probably know that the installer, which it inherited from Mandriva, has support for disk encryption and LVM, the Linux Logical Volume Manager.

This tutorial provides a detailed step-by-step guide on how to install this distribution on an encrypted LVM-based file system.

Why LVM and disk encryption?

Installing a distribution or any operating system on an encrypted disk protects your data from unauthorized physical access. And that protection extends to situations where the disk is moved to another computer. Essentially, when you encrypt a disk, the encryption key or passphrase that was used to lock or encrypt the disk will be required before the system can boot completely. So, when you attempt to boot a computer with PCLinuxOS installed on an encrypted disk, you will see this early in the boot process. The system will only boot completely if a valid encryption key is specified.
Encryption Key on PCLinuxOS 2011.6

LVM is a disk partitioning scheme that brings a degree of flexibility that is not possible with the traditional method. With LVM, for example, you can increase the size of a Logical Volume (LVM equivalent of a disk partition) while the file system is online. And if the disk is full, you can add a new disk to the system with the same simple steps that you used to increase the size of the Logical Volume. You may read more about the basic benefits of LVM.

To increase the size of a Logical Volume by 20 GB, for example, you need to first type this command:
lvextend -L+20G /dev/hum/home

Then to resize the underlying file system to match, assuming ext3 or ext4 is in use, just type:
resize2fs /dev/hum/home

At the time of publication (of this tutorial), there is no graphical LVM management application in PCLinuxOS’ repository, so all LVM management tasks will be from the command line.

Related Post:  Apply the nuke patch to LUKS cryptsetup in Linux Mint 16 and Ubuntu 13.10

Setting up an LVM-based system involves four steps:

  • Create a non-LVM partition for /boot.
  • Initialize the remaining space of use by LVM. In LVM parlance, this free space is called a Physical Volume (PV).
  • Create a Volume Group (VG). A VG is a virtual container for one or more PVs. The disk space available on a VG is the sum of the disk space of each member PV. If a VG runs out of disk space, you can attached a new hard disk to the system and add it to the VG.
  • Carve out Logical Volumes (LV) from the VG. As stated earlier, an LV is LVM’s equivalent of a disk partition.

Ok, enough introduction. Let us get started. Note that this tutorial used the standard KDE edition of PCLinuxOS 2011.6, but the steps involved are the same for the other editions. So, step 0 is to download an ISO image from here, burn it to a CD and boot the computer from the CD. Whether you opt to start the installation from the Live desktop or right from the boot menu, click until you get to the disk partition step shown below.

Depending on the state of the target disk, the installer will present two or more options. Because LVM is not the default disk partitioning scheme, you need to choose “Custom disk partitioning,” then click Next.
PCLinuxOS 2011.6 Encrypted LVM 1

This is the main disk partitioning window. If you have more than one hard drive on the system, they will all the shown here. Select the one you wish to install the system on, then to start setting up partitions, click Create. Aside from the non-LVM boot partition, you may configure as many logical volumes that you need. However, for a desktop system, logical volumes for /, Swap, and /home are all that is required.
PCLinuxOS 2011.6 Encrypted LVM 2

Related Post:  Building a Fedora-Based VoIP Server

For the boot partition, the size should very small, that is, compared to other partitions. Most Linux distributions allocate from 250 to 500 MB to a boot partition, so any value within that range should do. For “Filesystem type,” choose Linux Native (ext2) or ext3, and for the mount point, choose /boot. Ok.
PCLinuxOS 2011.6 Encrypted LVM 3

With the boot partition create, select the remaining space, then click on Create to configure the encrypted Physical Volume.
PCLinuxOS 2011.6 Encrypted LVM 4

If this is the only distribution or operating system you wish to use the available disk space for, move the slider all the way to the right. From the “Filesystem type” menu, choose “Linux Logical Volume Manager.” And then enable encryption and specify the encryption key or passphrase. Ok.

Note that the installer only allows you to specify one passphrase, but you may specify as many as seven other backup encryption keys, and when configured, any of the backup encryption keys unlock the disk during startup. How to manage disk encryption passphrases and key slots provides step-by-step instructions on how to configure additional encryption keys.
PCLinuxOS 2011.6 Encrypted LVM 5

After the Physical Volume has been created, the next step is to create a Volume Group. To do that, click on the bar representing the Physical Volume (the one with the key icon on it), then click Add to LVM.
PCLinuxOS 2011.6 Encrypted LVM 6

Creating a Volume Group just means giving it a name. The shorter the better. Makes life a bit easier if you need to manage the system from the command line. Ok.
PCLinuxOS 2011.6 Encrypted LVM 7

Yes, you want to install the lvm2 package. Without it you cannot complete the installation. Ok.
PCLinuxOS 2011.6 Encrypted LVM 8

Share:

Share on facebook
Facebook
Share on twitter
Twitter
Share on pinterest
Pinterest
Share on linkedin
LinkedIn

Hola! Did you notice that LinuxBSDos.com no longer run network ads?  Yep, no more ads from the usual suspects that track and annoy you across the Internet. But since I still need to pay to keep the site running, feel free to make a small donation by PayPal or your favorite cryptocurrency.

  • Bitcoin
  • Ethereum
  • Xrp
  • Bitcoin cash
  • Bitcoin sv
  • Litecoin
  • Binance coin
  • Cardano
  • Ethereum classic
Scan to Donate Bitcoin to bc1qzvlte2m224zkayhdc7fdfjkp2rsgt0l5a496ua

Donate Bitcoin to this address

Scan the QR code or copy the address below into your wallet to send some Bitcoin

Scan to Donate Ethereum to 0x0F4362DFF77F3Ba0Dc637F5f3Eba35D09a2fA60C

Donate Ethereum to this address

Scan the QR code or copy the address below into your wallet to send some Ethereum

Scan to Donate Xrp to r4ggjvL36njsMCYTkJ3S7cTHscPsMsSGQv

Donate Xrp to this address

Scan the QR code or copy the address below into your wallet to send some Xrp

Scan to Donate Bitcoin cash to qrs0dedzp9t55af3nfwypydghp29r0xguy9s20fz2k

Donate Bitcoin cash to this address

Scan the QR code or copy the address below into your wallet to send some Bitcoin cash

Scan to Donate Bitcoin sv to 15K9TLyVDBtLuG9cYvXCX9SSkq9C9oUKHK

Donate Bitcoin sv to this address

Scan the QR code or copy the address below into your wallet to send some Bitcoin sv

Scan to Donate Litecoin to LetJ9QQMb7u2LMZ9Tu6rtHwcBcQFW98fbG

Donate Litecoin to this address

Scan the QR code or copy the address below into your wallet to send some Litecoin

Scan to Donate Binance coin to bnb1ga8trq08ssqepd90v6225nzfgy448pu5pw8gxp

Donate Binance coin to this address

Scan the QR code or copy the address below into your wallet to send some Binance coin

Scan to Donate Cardano to addr1qx2354yw49etstfljpdhwja3ajjlt487lg95vu9ngy2q6vu4rf2ga2tjhqknlyzmwa9mrm997h20a7stgectxsg5p5esq5l7d9

Donate Cardano to this address

Scan the QR code or copy the address below into your wallet to send some Cardano

Scan to Donate Ethereum classic to 0xcD6CC972a2297FcafACDcfE042C55C69516a9264

Donate Ethereum classic to this address

Scan the QR code or copy the address below into your wallet to send some Ethereum classic

Subscribe for updates. Trust me, no spam!

Sponsored links

1. Attend Algorithm Conference, a top AI and ML event.
2. Reasons to use control panel for your server.
3. DHgate Computers Electronics, Cell Phones & more.

Upcoming events

4 Responses

  1. Thanks for this article. I had no idea full disk encryption with linux was so easy using PCLinuxOS or I’d have been using it for a while now… same with LVM!

Leave a Reply to Shannon Cancel reply

Your email address will not be published. Required fields are marked *

Get the latest

On social media
Via my newsletter

Partner links

1. Attend Algorithm Conference, a top AI and ML event for 2021.
2. Reasons to use control panel for your server.
3. DHgate Computers Electronics, Cell Phones & more.
Hacking, pentesting distributions

Linux Distributions for Hacking

Experts use these Linux distributions for hacking, digital forensics, and pentesting.

Categories
Archives

The authors of these books are confirmed to speak during

Algorithm Conference

T-minus AI

Author was the first chairperson of AI for the U.S. Air Force.

The case for killer robots

Author is the Director of the Center for Natural and Artificial Intelligence.

Why greatness cannot be planned

Author works on AI safety as a Senior Research Scientist at Uber AI Labs.