TRUECRYPT - Dual Boot Win7 + Backtrack 5r3
Hello,
First of all, you speak of truecrypt encrypting your BT5 installation, which is not possible.
You can achieve a full-disk-encryption dual-boot, but not with just Truecrypt.
The idea is simple:
Both operating systems are encrypted, with the truecrypt bootloader in the MBR of the bootdisk
and the BT bootloader in the MBR of the second HDD.
This is how you do it:
You install W7 (already did), then you install Truecrypt and encrypt your whole drive.
Make sure Truecrypt installs its bootloader in the MBR of the bootdisk (the disk
you are going to install windows on).
During this process, you will have to reboot and test the bootloader,
in order to make sure it is all working. After this, truecrypt can begin the actual encryption
(which takes long!). You might want to wait with this,
because it takes very long and you will have to do it again if you screwup during
the process of installing BT, so just leave it unencrypted (note that the bootloader
is already installed in the MBR).
Now, you boot your BT stick.
Partition your second disk.
I like fdisk but you can also apt-get install gparted,
so that you have a graphical interface for the partitioning of your drive.
You need two partitions, a boot partition and a root partition.
Make your boot partition at least 200 Mb (I've had problems with this,
so I always make my boot partition 512Mb) and leave the rest for the root partition.
Install the needed programs for the encryption:
apt-get install hashalot
The next step is very important and should be executed
very carefully!
"cryptsetup -y --cipher aes-xts-plain --key-size 512 luksFormat /dev/sdXY",
where X stands for your drive letter, and Y stands for the partition number.
Be carefull with this because you can mess up your windows installation!
You'll have to check which is the drive for your BT installation.
Use the tool you like to check which letter stands for your drive.
If all went ok, you should have four partitions:
- 100Mb W7 boot partition
- Rest of the disk W7 root partition
- 512Mb BT boot partition
- Rest of the disk BT root partition
Execute the command and type in your desired password twice.
Now execute this command to open your newly created encrypted partition:
"cryptsetup luksOpen /dev/sdXY pvcrypt"
Execute these commands:
"pvcreate /dev/mapper/pvcrypt"
"vgcreate vg /dev/mapper/pvcrypt"
Now, in order to create a (encrypted) swap partition,
execute the following command:
"lvcreate -n swap -L XG vg",
where the X stands for the amount of gigabytes for
your swap partition (use the amount of ram you have).
Execute the following command to create the root partition
inside the encrypted partition, next to the swap partition:
"lvcreate -n root -l 100%FREE vg"
Execute:
"mkswap /dev/mapper/vg-swap"
"mkfs.ext4 /dev/mapper/vg-root"
Finally, ready to install BT to the created partitions.
Click on install.sh on your desktop.
Proceed with the installer until it says
"Prepare disk space"
Select manually.
Select the first partition of the drive (/dev/sdX1)
and make it ext4, let it be formatted and set mount point: /boot
Select "/dev/mapper/vg-root", make it ext4, let it be formatted en set mount point: /
Select "/dev/mapper/vg-swap", make it swap (should be already, but just to make sure).
Click forward and then advanced (VERY IMPORTANT).
Select the second drive (/dev/sdX) and let the BT's bootloader get installed.
Click install and wait.
Click "Continue testing".
Execute (in the SAME terminal):
mkdir /mnt/backtrack5
mount /dev/mapper/vg-root /mnt/backtrack5
mount /dev/sdb1 /mnt/backtrack5/boot
chroot /mnt/backtrack5
mount -t proc proc /proc
mount -t sysfs sys /sys
apt-get update
apt-get install hashalot lvm2
vi /etc/crypttab
You are now editing a file.
Add the following:
pvcrypt /dev/sdX2 none luks
/dev/sdX2 should be the encrypted partition (you created
with this command: cryptsetup -y --cipher aes-xts-plain --key-size 512 luksFormat /dev/sdXY)
Quit vi (:wq) and execute:
vi /etc/fstab
Change te line about the root partition (the only line with "/" in it. NOT /boot!),
make it: "/dev/mapper/vg-root / ext4 defaults 0 1"
Execute:
cd ~
wget http://www.infosecramblings.com/cryptroot.patch
patch -u /usr/share/initramfs-tools/scripts/local-top/cryptroot ./cryptroot.patch
apt-get update
apt-get upgrade
apt-get dist-upgrade
update-initramfs -k all -u
This is it, you are ready!
Execute "reboot" and watch the magic!
Select ESC at the truecrypt bootloader
to boot BT and type your password at the truecrypt
bootloader to boot W7.
Good luck,
if you have further questions, I am glad to help you.
Originally Posted by Swiftme
