Entertainment at it's peak. The news is by your side.

How to Dual-Boot Ubuntu 20.04 and Windows 10 with Encryption


Image for

08 Apr 2020

Whenever you gallop the Ubuntu installer, there’s an approach to dual-boot Ubuntu with an
present Residence windows installation. There’s also an approach to encrypt your Ubuntu
installation, however handiest whenever you happen to erase the total lot and set up ubuntu. There’s no
automatic manner to set up Ubuntu alongside Residence windows 10 with encryption. And whereas
there are a huge selection of tutorials for dual-booting Ubuntu and Residence windows, a huge selection of them
are old skool – on the total referencing an MBR partition table – and nearly none of
them seem to tackle encrypting your Ubuntu partition.

Twin-booting with encrypted storage mustn’t ever be this now no longer easy in 2020.

–Me, whereas realizing suggestions to total this.

In actuality, whenever you resolve it out, it’s now no longer that now no longer easy. The complex thing is that
this isn’t effectively-documented anyplace! So I’m hoping to repair that with this
tutorial weblog post. Genuinely, whenever you happen to already know ample about Ubuntu to position of abode up a
dual-boot with Residence windows, it’s handiest rather bit extra worthy to total it with encryption.
I ready this tutorial on a Dell Latitude e7450, and I radiant-tuned it after I
tested it on my Dell Precision 5510. So it is going to work with nearly no
modification on most Dell systems, and with handiest minor adjustments
(particularly spherical BIOS setup) on most other forms of computer systems.


To jot down this e book, I compiled records from loads of sources. Here are some
of the most functional references I learned:

It’s worth noting that this system doesn’t encrypt /boot. While there are
kindly causes for encrypting /boot, the graphical installer does now no longer encrypt it
need to you cease a graphical set up with LUKS. As such, I’m matching that precedent,
and conserving the simplicity of an unencrypted /boot partition. Thus, the e book
I’ve compiled below is ravishing about the simplest manner to bask in a LUKS encryption
with dual-boot.

Why encryption is main

I started the utilization of encrypted storage on all my inner most computer systems five or six years ago
after noticing that the total companies I’d labored for required it, and had correct
reason to. Laptops catch lost and stolen on a abnormal basis. They’re high-trace gadgets
which will more than seemingly be diminutive and simple to carry. And when a thief gets your computer computer, there’s
hundreds functional records on it that they’ll exhaust or promote. Even whenever you happen to exhaust a
password to log in, it’s straightforward for an attacker to assemble catch entry to to your files if
your disk isn’t encrypted – as an illustration, by the utilization of a stay USB stick. And once
they’ve that files, they would per chance well catch catch entry to to online accounts, bank statements,
emails, and hundreds other files. For me, an encrypted now no longer easy disk isn’t optional
anymore – its a necessity.

An Overview

So what are we going to total? This tutorial will succor you to position of abode up a machine to
dual-boot Ubuntu 20.04 and Residence windows 10. (I haven’t tested it, however it no doubt need to
work with most other standard variations (~16.04+) of Ubuntu or Residence windows.) The machine
will exhaust a GPT now no longer easy disk with UEFI (your BIOS need to attend UEFI). The Ubuntu
partition will seemingly be encrypted with LUKS.1 The Residence windows partition can optionally
be encrypted with BitLocker. I’m going to retain the Ubuntu installation as stop
to a “default” installation as seemingly – no enjoy tricks esteem a separate
/home partition, however it no doubt need to be rather straightforward so as to add that your self whenever you happen to
basically deserve to.

I’m going to begin with a blank now no longer easy disk, inserting in both Residence windows 10 and Ubuntu
from scratch. Whenever you may per chance well presumably even bask in already got Residence windows installed and likewise you esteem to need to retain it, you
need to catch a plan to shrink your windows partition and join us in fragment 3 (though
you may per chance well presumably also deserve to dash phases 1 and a pair of to comprise what we did).

To present you a colossal overview of where we’re headed, right here’s what we’re going to

  1. Prepare the installation media and computer
  2. Set up Residence windows 10
  3. Make an encrypted partition for Ubuntu
  4. Set up Ubuntu

Needless to claim, as with every novel OS installation, it’s good to attend up any main
files earlier than proceeding. The instructions below will erase the total files to your
now no longer easy disk.
Proceed at your bear chance; I’m now no longer responsible for any hurt or
files loss.

Since we’re inserting in both Residence windows 10 and Ubuntu from scratch, we’ll need a USB
stick for every. Whenever you don’t bask in already got a computer working Ubuntu or Residence windows,
making the installation media will seemingly be rather extra worthy – however there are tutorials
for that and I’ll imply you may per chance well catch a plan to resolve it out to your bear.

  1. Make a Residence windows Installer USB stick. The very top manner is to make exhaust of the Residence windows
    10 Media Creation Instrument
    from a
    computer that’s already working Residence windows.
  2. Make an Ubuntu 20.04 USB stick. The very top manner is to obtain the
    and exhaust the Startup Disk Creator on a
    computer that’s already working Ubuntu.

Huge! We’ve got our USB sticks ready to head! One last item earlier than we catch
started – we should always create certain our BIOS is place aside of abode up accurately. In particular, we
deserve to create certain we’re the utilization of UEFI besides our OS.2

The Dell BIOS

  1. Make certain your computer is working the most traditional BIOS within the market. Here’s main
    because an out-of-date BIOS can bask in bugs, and those bugs on occasion have an effect on
    things esteem UEFI, non-Residence windows operating systems, or other substances we’ll be
  2. Edit your BIOS settings. The following names are doubtlessly particular to Dell
    BIOS, however other producers would possibly per chance well bask in identical settings.

    1. Beneath Traditional and Boot Sequence, create certain your Boot
      List Possibility
      is place aside of abode to UEFI.
    2. Beneath Traditional and Advanced Boot Alternatives, I disabled
      Legacy Possibility ROMs. It’s main that both OSes set up in UEFI mode.
      (It’s seemingly you’ll per chance well presumably also doubtlessly allow this when installation is total whenever you happen to care).
    3. Beneath Security, TPM Security need to be enabled whenever you happen to
      deserve to without downside place aside of abode up BitLocker in Residence windows.
    4. I disabled Bag Boot. I’m now no longer certain if right here’s completely required, and
      you may per chance well catch a plan to strive leaving it on or re-enabling it is going to you’re performed whenever you happen to esteem to bask in.

Now that our BIOS is configured for UEFI, we’re going to position of abode up our now no longer easy disk.

For this tutorial, your BIOS need to attend UEFI!

Most modern computer systems attend this, however if yours doesn’t this tutorial will now no longer
work for you. It’s good to take into yarn:

  • Installing handiest Linux with encryption the utilization of the graphical installer.
  • OR Installing handiest Residence windows with encryption.
  • OR Twin-booting Linux and Residence windows without encryption the utilization of Ubuntu’s graphical installer.
  • OR Discovering one other tutorial or realizing suggestions to total this with an MBR disk.
  1. Fully erase your now no longer easy disk and place aside of abode it up for UEFI by doing the

    1. Boot your Ubuntu USB stick and exhaust Try without inserting in.
    2. Open a terminal. Originate it fullscreen whereas you’re at it.
    3. Figure out what your predominant now no longer easy disk most frequently known as. This can doubtlessly be
      either /dev/sda or /dev/nvme0n1. Importantly, it’s now no longer /dev/sda1 or
      /dev/nvme0n1p1 – those are partitions of the disk. One manner to resolve out what
      yours most frequently known as is to gallop lsblk and gape at the disk size. All via the comfort
      of this e book, I’m going to consult /dev/sda. If yours is now no longer
      /dev/sda, substitute /dev/sda alongside with your bear (maybe /dev/sdb or
      /dev/nvme0n1) for the comfort of this e book.
    4. High-tail the following commands. This can initialize the pressure as a GPT pressure
      and catch a 550M EFI machine partition formatted as FAT32.

      $ sudo su
      # sgdisk --zap-all /dev/sda
      # sgdisk --novel=1:0:+550M /dev/sda
      # sgdisk --exchange-establish=1:EFI /dev/sda
      # sgdisk --typecode=1:ef00 /dev/sda
      # mkfs.stout -F 32 /dev/sda1

OK, fragment 1’s total. We bask in our installation media ready to head and the
computer’s BIOS and now no longer easy pressure is place aside of abode up accurately. Subsequent, we’ll set up Residence windows.

Phase 2: Set up Residence windows

In this fragment, we’re going to set up Residence windows. Demonstrate that after we cease this, we’re
going to leave some unallocated dwelling to set up Linux later. Here’s a correct
plan because the Residence windows installer will mess with our partitions rather
bit, and its more straightforward to let it cease so earlier than finalizing our Linux partitions.

The Windows installer

  1. Boot from your Residence windows Installer USB stick.
  2. Utilize a Custom (edifying) set as a lot as catch to the Residence windows partitioning instrument.
  3. Make a brand novel partition. The scale of this partition need to be the amount of
    disk dwelling you esteem to need to make exhaust of for Residence windows. In this case, I did 80G because the SSD
    on my computer in all fairness diminutive. If perilous, cease about half of of your now no longer easy
  4. Residence windows will warn you that it is going to catch an additional machine partition.
    Here’s correct.4
  5. Set up Residence windows onto the partition you ravishing made. There’s no deserve to format
    any partitions – the Residence windows installer will take care of that for you.
  6. When the Residence windows installation is performed, log in and permit BitLocker on
    pressure C: . This can robotically catch yet one other partition to your disk
    (a Residence windows recovery partition) – which is why we’re doing it earlier than
    partitioning for Ubuntu.

At this point, you may per chance well catch a plan to begin the utilization of Residence windows. But I’d retain far from doing too great setup
or personalization yet so that you just don’t need to total it once more if one thing goes wicked
below. Whenever you esteem to need to double take a look at your partitions, right here’s what you’ll be left
with after inserting in Residence windows and enabling BitLocker:

ubuntu@ubuntu:~$ sudo sgdisk --print /dev/sda
Disk /dev/sda: 500118192 sectors, 238.5 GiB

Number  Commence (sector)    Stop (sector)  Dimension       Code  Establish
   1            2048         1128447   550.0 MiB   EF00  EFI
   2         1128448         1161215   16.0 MiB    0C01  Microsoft reserved ...
   3         1161216       167825076   79.5 GiB    0700  Total files partition
   4       167825408       168900607   525.0 MiB   2700

Phase 3: Partition the pressure for Ubuntu

Here’s the trickiest fragment since right here’s where we should always manually place aside of abode up our
encrypted disks for Ubuntu. We’re going to create it work very corresponding to the vogue
the Ubuntu installer would place aside of abode things up whenever you happen to encrypted your total disk.

Disk partitions in GParted

All via this fragment, I’m going to be referencing sgdisk commands. You
would possibly per chance well presumably exhaust gdisk whenever you happen to’re contented with it and wish an interactive
interface, or you may per chance well presumably exhaust GParted whenever you happen to understand. sgdisk commands are ravishing
more straightforward to reference in an academic. And once more, I’ll be referring to /dev/sda,
however there’s a likelihood yours can also very effectively be named one thing esteem /dev/nvme0n1 – ravishing
proceed substituting no topic you’ve been the utilization of.

Whenever you esteem to bask in, you may per chance well catch a plan to gallop sudo sgdisk --print /dev/sda to peek the partition
table earlier than transferring on. You’ll search loads of partitions created by the Residence windows
installer, and need to search some empty dwelling where we’re about to set up Ubuntu.

  1. Over again, Boot the Ubuntu USB stick and Try without inserting in.
  2. Open a terminal. It’s a correct advice to create it fullscreen.
  3. Originate a partition for /boot and a partition for our Linux machine & files (to
    be encrypted with LUKS).

    $ sudo su
    # sgdisk --novel=5:0:+768M /dev/sda
    # sgdisk --novel=6:0:0 /dev/sda
    # sgdisk --exchange-establish=5:/boot --exchange-establish=6:rootfs /dev/sda
    # sgdisk --typecode=5: 8300 --typecode=6: 8300 /dev/sda
    # mkfs.ext4 -L boot /dev/sda5

Now, we’re going to encrypt our Linux files partition.

  1. Setup LUKS on our Linux files partition.

    # cryptsetup luksFormat --kind=luks1 /dev/sda6
    This can overwrite files on /dev/sda6 irrevocably.
    Are you certain? (Sort uppercase slide): YES
    Enter passphrase for /dev/sda6: 
    Evaluation passphrase: 
    # cryptsetup delivery /dev/sda6 sda6_crypt
    Enter passphrase for /dev/sda6: 
    # ls /dev/mapper/
    adjust sda6_crypt
  2. Setup LVM inner our encrypted partition for a files volume and swap dwelling.
    It’s correct that our swap dwelling is inner the encrypted partition on account of records
    that can also very effectively be there when the machine suspends. Additionally, for hunch/hibernate to
    work, it’s good to bask in a minimal of as great swap dwelling as reminiscence. My computer computer has 8G
    reminiscence, so I’ll catch 8G swap dwelling.5

    # pvcreate /dev/mapper/sda6_crypt
    Physical volume "/dev/mapper/sda6_crypt" successfully created.
    # vgcreate ubuntu-vg /dev/mapper/sda6_crypt
    Volume neighborhood "ubuntu-vg" successfully created
    # lvcreate -L 8G -n swap_1 ubuntu-vg
    Logical volume "swap_1" created.
    # lvcreate -l 100%FREE -n root ubuntu-vg
    Logical volume "root" created.

Now, all our partitions are ready. Don’t cease right here! Proceed to the next
fragment without exiting the Ubuntu stay atmosphere.

Phase 4: Set up Ubuntu

  1. High-tail the Ubuntu installer from the Desktop, and have interaction One thing else to
    configure partitions your self.

    1. Utilize our ~768M partition as ext4 with mount point /boot
    2. Utilize /dev/mapper/ubuntu--vg-root as ext4 with mount point /
    3. Utilize /dev/mapper/ubuntu--vg-swap_1 as swap
    4. The bootloader tool need to be /dev/sda (though it appears to be like that this
      surroundings will now no longer the truth is be historical in UEFI mode)
  2. When the installer is performed, hit Proceed Discovering out. We need to always total a
    couple extra things earlier than we restart.
  3. Scheme up and so forth/crypttab. Here’s what is going to imply you may per chance well catch a plan to unlock your encrypted
    pressure by typing to your passphrase when booting.

    1. Earn the UUID of the partition you place aside of abode up with LUKS: sudo blkid /dev/sda6
    2. Gain right into a chroot within the newly installed machine:

      # mount /dev/mapper/ubuntu--vg-root /diagram
      # mount /dev/sda5 /diagram/boot
      # for n in proc sys dev and so forth/resolv.conf; cease mount --rbind /$n /diagram/$n; performed 
      # chroot /diagram
      # mount -a
    3. Inside of your chroot (that’s, within the identical terminal), place aside of abode up /and so forth/crypttab.
      Utilize your favourite editor to edit this file. I’ll exhaust vi. sudo vi /and so forth/crypttab
      Place the following file contents, replacing the UUID with the precise UUID you
      learned above.

      # alternatives historical:
      #     luks    - specifies that right here's a LUKS encrypted tool
      #     tries=0 - permits to re-enter password limitless quantity of cases
      #     discard - permits SSD TRIM exclaim, WARNING: seemingly safety chance (extra: "man crypttab")
      #     loud    - show all warnings
      sda6_crypt UUID=abcdefgh-1234-5678-9012-abcdefghijklm none luks,discard
    4. High-tail the following to exhaust the adjustments you ravishing made.

      # substitute-initramfs -okay all -c

Done! Congratulations, you’ve created a dual-boot machine with Ubuntu 20.04 and
Residence windows 10 alongside with your total files encrypted! Now that both installations are
performed, you may per chance well catch a plan to reboot your computer.

By default, your computer will boot into grub, that can per chance well presumably boot Ubuntu. Despite the truth that
Residence windows is listed in grub, booting Residence windows from grub with BitLocker enabled
won’t work because the machine’s TPM will detect a exchange within the boot sequence.
To retain far from this area, it’s good to boot Residence windows all of a sudden from your computer’s
BIOS boot menu – on the total accessible by urgent F12 on startup.

As a reference, right here’s the ideal train of my now no longer easy pressure (with 2 logical volumes
on the rootfs partition for / and swap):

$ sudo sgdisk --print /dev/sda
Disk /dev/sda: 500118192 sectors, 238.5 GiB
Number  Commence (sector)    Stop (sector)  Dimension       Code  Establish
   1            2048         1128447   550.0 MiB   EF00  EFI
   2         1128448         1161215   16.0 MiB    0C01  Microsoft reserved ...
   3         1161216       167825076   79.5 GiB    0700  Total files partition
   4       167825408       168900607   525.0 MiB   2700  
   5       168900608       170473471   768.0 MiB   8301  /boot
   6       170473472       500118158   157.2 GiB   8301  rootfs

I hope you learned this e book functional, and I hope elephantine-disk encryption with Ubuntu
turns into extra standard and better-supported consequently!

Read More

Leave A Reply

Your email address will not be published.