HOWTO: BT4 Pre-Final Full Disk Encryption

[HKdnp]

hi, cant you do the same whit truecrypt? what is a gui...

[floyd]

hi, cant you do the same whit truecrypt?

No, Truecrypt can make encrypted containers, we want pre-boot encryption. We encrypt the partition itself, not only folders.

what is a gui...

A gui is a graphical user interface

[ESC201]

hi, cant you do the same whit truecrypt?

No, Truecrypt can make encrypted containers, we want pre-boot encryption. We encrypt the partition itself, not only folders.

Truecrypt is able to do full disk encryption with Windows but not Linux. I believe this is done through the use of a giant container of sorts. Anyway, floyd is correct, Truecrypt will not work for us here.

[TomSawyer]

grub-install --root-directory=/mnt/root/boot /dev/sdX

should be

grub-install --root-directory=/mnt/root /dev/sdX

Thanks for the great tutorial!

[floyd]

I'm trying to get this working and everything is working up until this point:

grub-install /dev/sdX

So I "pivot back" to the live CD and try:

grub-install --root-directory=/mnt/root/boot /dev/sdX

But then I reboot I end up stuck at the GRUB interface, or whatever it's called. Here's a breakdown:

root@bt:/# grub-install /dev/sda
/dev/sda: Not found or not a block device.

Let me quote myself, maybe this helps:

hey barry

sorry Im in a hurry, but try this (with mounting the proc and dev before chrooting):

mkdir /mnt/bt4
mount /dev/mapper/btcrypt-root /mnt/bt4/
mkdir /mnt/bt4/boot/
mount /dev/sda1 /mnt/bt4/boot
cp --preserve -R /{bin,dev,home,pentest,root,usr,boot,etc,lib,opt,sb in,var} /mnt/bt4/
mkdir /mnt/bt4/{mnt,tmp,proc,sys}
chmod 1777 /mnt/bt4/tmp/
mount -t proc proc /mnt/bt4/proc/
mount -o bind /dev /mnt/bt4/dev/
chroot /mnt/bt4/ /bin/bash

or maybe just try grub-install without any arguments after chrooting

[ESC201]

grub-install --root-directory=/mnt/root/boot /dev/sdX

should be

grub-install --root-directory=/mnt/root /dev/sdX

Thanks for the great tutorial!

Ahh yes, another typo. I really ought to check over commands I type from memory. Thank you for pointing it out and I'm glad you got it working.

[TomSawyer]

Sorry about the massive edit before, but once I got it working, it seemed kinda pointless to leave it all.

Also I think the trailing / might screw things up, ie:

grub-install --root-directory=/mnt/root /dev/sdX

instead of

grub-install --root-directory=/mnt/root/ /dev/sdX

Pretty sure the grub-install script will end up making that /mnt/root//boot.

[Barry]

Heh, I used to work with a Tom Sawyer.

[ESC201]

Sorry about the massive edit before, but once I got it working, it seemed kinda pointless to leave it all.

Not necessarily. Others that experience the same error could find it, and the solution, through Google. There's no such thing as too much documentation (relatively speaking).

Also I think the trailing / might screw things up, ie:

grub-install --root-directory=/mnt/root /dev/sdX

instead of

grub-install --root-directory=/mnt/root/ /dev/sdX

Pretty sure the grub-install script will end up making that /mnt/root//boot.

Bash should be able to interpret the extra slash accordingly. For example. open a shell and type "cd /boot/grub" and then "cd /boot//grub". Both take you to the same place; or at least that's how I understand it, someone correct if I am mistaken.

[TomSawyer]

Heh, I used to work with a Tom Sawyer.

I hope he wasn't TOO much of a pain.