How to Install Ubuntu 22.04 with Full Disk Encryption Enabled

---

Disk Encryption is the process of converting data on a disk into a form that cannot be easily understood by unauthorized people. Full disk encryption (FDE) protects all the data on the disk by encrypting it. When combined with LVM (Logical Volume Management), it offers a secure and flexible storage setup, allowing you to manage disk space more efficiently while keeping your data safe.

Login to CrownPanel

---

Login to your CrownPanel account.

To start the installation, First, mount the Ubuntu 22.04 ISO.

To mount the ISO, click on CD-ROM and then select the "Ubuntu 22.04 server amd64" ISO from the drop-down menu and click on the "Mount" button (It will take 2-3 minutes).

Once the ISO has mounted (the Task Log tab will show the status of the task), navigate to the "Power Control" tab and then perform a Reboot task on the server.

Next, Switch to the "VNC" Tab, Launch VNC to start the installation.

If VNC doesn't show the Ubuntu 22.04 installer, please click on CTRL+ALT+DEL from the VNC console to send a reboot.

Start the Installation

---

Select the desired language and click on continue.

Update Installer: If prompted, update the installer. This is recommended to ensure you have the latest version.

Select the desired keyboard layout and click on done.

Select the installation medium.

Select the Network configuration and click done.

You can either set up a static network configuration or simply go ahead with DHCP (Simply press ENTER here).

You can configure a proxy for the server in this part of the process if needed. Ideally, in most cases you don't need to, just leave it blank and proceed.

Next, in the mirror selection, we keep the default mirror address that Ubuntu detects for us,

Disk Partitioning with Encryption Enabled

---

For disk partitioning, there is an option. We will guide you through, including setting up full disk encryption with LVM.

Setting Up LVM with Full Disk Encryption

Set Up LVM: Choose "Set up disk as an LVM group."

Enable Encryption: Select "Encrypt the LVM group with LUKS."

Enter Passphrase: You will be prompted to enter a passphrase. This passphrase is critical as it will be required each time the system boots to unlock the disk. Confirm the passphrase by entering it again.

Note: Warning: Make sure to remember this passphrase, as losing it will make your data inaccessible.

we will keep it simple and go with automatic partitioning. Select the "Use an entire disk" option and continue.

Review Partitions: Review the partitions and then proceed.

Since we’re installing a new Operating System on the existing disk, you will be prompted to confirm that you will lose all data on the selected disk. Confirm and select "Continue."

Profile Setup

---

You will be provided with a form to enter user information. These will be the login details you’ll use later to connect to the server.

Regarding Ubuntu Pro: Skip the Ubuntu pro, if required then you can select/enable the Ubuntu pro.

Install OpenSSH Server

---

Select OpenSSH Server: This package is essential if you need to connect to your server remotely after the installation. Select it during the package selection step.

Additional Packages: The installer offers additional packages that can be pre-installed. For this guide, we will keep it minimal and not select any extra packages.

Complete the Installation

---

Start Installation: At this stage, Ubuntu will start the installation process.

Unmount ISO: After selecting to reboot, Ubuntu will prompt you to unmount the installation medium. Switch back to CrownPanel, select the "CD-ROM" tab, and click on "Unmount."

Final Reboot: Return to the VNC window and press ENTER to reboot the VPS.

Upon rebooting, the system will prompt you to enter the encryption passphrase that you set during the installation. This passphrase is required to unlock the encrypted disk and boot the system.

You will be prompted with the following:

"Please unlock disk dm_crypt-0:"

Once the correct passphrase is entered, the server will proceed to boot into your newly installed and encrypted Ubuntu 22.04.

Note: It's crucial to remember the passphrase, as you will be prompted to enter it every time you reboot the system; forgetting it will result in losing access to your data.

Once done, you'll get the login screen.

With this guide, you're now equipped to confidently install and secure Ubuntu 22.04, ensuring your system is both up and running and well-protected.