partitioning step (Figure
4.20
, “
Guided Partitioning with Encrypted LVM
” [page 90]) where you
will instead select “Guided - use entire disk and set up encrypted LVM.” The net result will be a
system that cannot be booted or accessed until the encryption passphrase is provided. This will
encrypt and protect the data on your disk.
Figure 4.20 Guided Partitioning with Encrypted LVM
The guided partitioning installer will automatically assign a physical partition for the storage of
encrypted data, as shown in Figure
4.21
, “
Confirm Changes to the Partition Table
” [page 91]. At
this point, the installer will confirm the changes before they are written on the disk.
90
Kali Linux Revealed
Figure 4.21 Confirm Changes to the Partition Table
This new partition is then initialized with random data, as shown in Figure
4.22
, “
Erasing Data on
Encrypted Partition
” [page 92]. This makes the areas that contain data indistinguishable from the
unused areas, making it more difficult to detect, and subsequently attack, the encrypted data.
91
Chapter 4 — Installing Kali Linux
Figure 4.22 Erasing Data on Encrypted Partition
Next, the installer asks you to enter an encryption passphrase (Figure
4.23
, “
Enter Your Encryp-
tion Passphrase
” [page 93]). In order to view the contents of the encrypted partition, you will
need to enter this passphrase every time you reboot the system. Note the warning in the installer:
your encrypted system will only be as strong as this passphrase.
92
Kali Linux Revealed
Figure 4.23 Enter Your Encryption Passphrase
The partitioning tool now has access to a new virtual partition whose contents are stored en-
crypted in the underlying physical partition. Since LVM uses this new partition as a physical
volume, it can protect several partitions (or LVM logical volumes) with the same encryption key,
including the swap partition (see sidebar “
Encrypted Swap Partition
” [page 89]). Here, LVM is not
used to make it easy to extend the storage size, but just for the convenience of the indirection
allowing to split a single encrypted partition into multiple logical volumes.
End of the Guided Partitioning with Encrypted LVM
Next, the resulting partitioning scheme is displayed (Figure
4.24
, “
Validating Partitioning for En-
crypted LVM Installation
” [page 94]) so you can tweak settings as needed.
93
Chapter 4 — Installing Kali Linux
Figure 4.24 Validating Partitioning for Encrypted LVM Installation
Finally, after validating the partition setup, the tool asks for confirmation to write the changes on
the disks, as shown in Figure
4.25
, “
Confirm Partitions to be Formatted
” [page 95].
94
Kali Linux Revealed
Figure 4.25 Confirm Partitions to be Formatted
Finally, the installation process continues as usual as documented in section
4.2.1.14
, “
Configuring
the Package Manager (
apt
)
” [page 84].
|
