update-grub
grub-install

along with the `update-initramfs` command at the end of your instructions.

@Christian,

Hi! Thank you for following the article.

To update from Ubuntu 22.04 to Ubuntu 24.04 while maintaining your exact encryption setup with both the boot partition LUKS1-encrypted and the root partition LUKS2-encrypted, you will need to follow a manual process since the default installer doesn’t provide this specific configuration.

Warning: Before proceeding, ensure that you have backed up all important data. The following steps involve manual partitioning and encryption which can result in data loss if not done correctly. Proceed with caution and make sure you are comfortable with using terminal commands and managing disk partitions.

Here’s a step-by-step guide:

1. Download the Ubuntu 24.04 LTS ISO from the official website and Create a bootable USB drive using tools like Rufus or balenaEtcher.

2. Insert the Live USB into your Acer Swift Go 14 and boot from it.

3. Choose “Try Ubuntu” to enter the live session.

4. Set up LUKS encryption for the boot partition:

sudo cryptsetup luksFormat --type luks1 /dev/nvme0n1p1
sudo cryptsetup open /dev/nvme0n1p1 cryptboot
mkfs.ext4 /dev/mapper/cryptboot

5. Set up LUKS encryption for the root partition:

sudo cryptsetup luksFormat /dev/nvme0n1p2
sudo cryptsetup open /dev/nvme0n1p2 cryptroot
mkfs.ext4 /dev/mapper/cryptroot

6. Mount the partitions.

sudo mount /dev/mapper/cryptroot /mnt
sudo mkdir /mnt/boot
sudo mount /dev/mapper/cryptboot /mnt/boot

7. Start the Ubuntu installer from the live session. When asked about the installation type, choose “Something else” to perform manual partitioning.

• Select the /dev/mapper/cryptroot partition and set it as the root (/) partition.
• Select the /dev/mapper/cryptboot partition and set it as the boot partition.

8. Follow the remaining steps of the installer to complete the installation.

9. After the installation is complete, do not reboot yet. Instead, chroot into the new system:

sudo mount --bind /dev /mnt/dev
sudo mount --bind /proc /mnt/proc
sudo mount --bind /sys /mnt/sys
sudo chroot /mnt

10. Configure the initramfs to unlock both partitions at boot by editing /etc/crypttab file:

nano /etc/crypttab

Add the following lines:

cryptboot UUID= none luks
cryptroot UUID= none luks

You can get the UUIDs by running:

blkid

11. Update the initramfs and GRUB configuration:

update-initramfs -u
update-grub

12. Exit chroot and reboot:

exit
sudo reboot

By following these steps, you should be able to upgrade to Ubuntu 24.04 while keeping your boot and root partitions encrypted with LUKS1 and LUKS2, respectively. If you encounter any issues or have further questions, feel free to ask!

On my Acer Swift Go 14, I now have only Ubuntu 22.04 LTS with the boot partition LUKS1-encrypted and the root partition LUKS2-encrypted.

I just followed your article “How to Encrypt Full Disk While Installing Ubuntu 22.04“! I have an NVMe SSD on my laptop. So, if I now wish to update from Ubuntu 22.04 to Ubuntu 24.04 and still keep this exact encryption setup with encrypted boot and root, how would I achieve it?

Tell me if you know a way, or can you find out what in this article needs to be changed to make it work for manually encrypting Ubuntu 24.04 during installation?

@Christian,

Here is the article that demonstrates how to encrypt the full disk during Ubuntu 24.04 installation: [Encrypt Ubuntu 24.04 Installation]

Thanks a lot. When do you think you will have it ready?