I noticed during the install stage, when choosing Erase disk and install Ubuntu with LVM and encryption enabled, that after installation the /boot and /boot/efi partitions are not encrypted.

Is this normal, or are there any post-install steps required?

Thank you Ravi you are the best!!

@Vasileios,

Using LVM with Encryption on Ubuntu

1. Boot from the Ubuntu installation media and select “Install Ubuntu“.
2. When you reach the “Installation type” screen, choose “Something else” to manually configure your partitions.
3. Select the disk you want to use for LVM and click on the “New Partition Table” to create a new partition for the encrypted LVM setup.
4. After setting up the encrypted partition, it will be shown as a LUKS partition, here select this LUKS partition and click on “Configure encrypted volumes” to set it up.
5. You can then create logical volumes for root, home, swap, etc. by selecting the encrypted partition and clicking “+” to create new logical volumes.
6. When creating logical volumes, set Use as to Ext4 journaling file system (or your preferred file system) for each logical volume.
7. Once you have created and formatted the partitions, select the logical volume for root (/) and click “Continue” to proceed with the installation.
8. Finish the installation process, and you will have Ubuntu installed with LVM on an encrypted disk.

@Vaseileios,

Yes, you can use LVM with full disk encryption and customize your partitions as needed before continuing. Let me know if you need any guidance on setting it up!