Windows 11 & Linux Mint 21.3, dual boot installation, 2x hard drive, system encryption

[LinusVSLinux]

Hello community,

I need some help. I want more data protection and would therefore like to use Linux Mint as well.

So, I want to do the following: equip my notebook with two operating systems and encrypt the system. I have two different hard drives, one of which will have/has Windows 11 and the other Linux Mint 21.3. Each hard drive will have several partitions, which will be formatted for the respective operating system and encrypted using the same method as the specific operating system.

I plan to encrypt Windows 11 later with VeraCrypt, but I'm not sure yet. Do you have any suggestions about the advantages and disadvantages of this? I've read everything from “it doesn't work, it only causes problems” to “it works flawlessly.” Or would Bitlocker be better?

What do I need to do to prevent Windows 11 from reading or collecting data on my Linux Mint? Does it even do that? Can I

Problem:
I currently have the following problem with the installation. One is with the hard disk selection or formatting. And the other is with system encryption.
As far as I know, system encryption can only be performed during installation? Is that correct?
Since I have two hard disks, I have to select my hard disk/partition during the installation process <Installation type>, <Something else>. Unfortunately, I don't see any system encryption there.
Under <Change>, <Use as>, I selected “physical volume for encryption” and set a <password>. After I tried to perform an installation on this partition, I got the message “Select system partition,” “minimum size 9.3 GB.”

My question is: how do I create system encryption / hard disk encryption? Can anyone help me with this process?

I seem to remember that Linux Mint uses the ext4 file system as its system file. But then the question is how can I create system encryption or hard disk encryption?

I have read other posts that say I should only encrypt the file system, but it is important to me to have complete system/hard disk encryption.
I would be very grateful if someone could give me some tips and input on how to install Linux Mint with encryption.


System data:
Operating system I: Windows 11 (already installed)
Operating system II: Linux Mint 21.3 (to be installed)
Computer: Thinkpad P16 with Linux certification for Ubuntu 22.04

 

[CaffeineAddict]

I plan to encrypt Windows 11 later with VeraCrypt, but I'm not sure yet. Do you have any suggestions about the advantages and disadvantages of this?

No, for Windows stick with bitlocker, if possible with TPM.

What do I need to do to prevent Windows 11 from reading or collecting data on my Linux Mint? Does it even do that?

Windows is unable to read ext4 file system, but is possible if there is Windows specific software that could do it.
However if you encrypt your Linux drive nothing can read it from Windows.

As far as I know, system encryption can only be performed during installation? Is that correct?

It's far easier to encrypt during install, I always do it that way.

Since I have two hard disks, I have to select my hard disk/partition during the installation process <Installation type>, <Something else>. Unfortunately, I don't see any system encryption there.
Under <Change>, <Use as>, I selected “physical volume for encryption” and set a <password>. After I tried to perform an installation on this partition, I got the message “Select system partition,” “minimum size 9.3 GB.”

My question is: how do I create system encryption / hard disk encryption? Can anyone help me with this process?

I don't know how Mint installer works but it should offer encrypted LVM setup with dm-crypt (cryptsetup) during partitioner phase.

I seem to remember that Linux Mint uses the ext4 file system as its system file. But then the question is how can I create system encryption or hard disk encryption?

File system doesn't matter because you format partition that was designated as crypt volume (logical group)

I have read other posts that say I should only encrypt the file system, but it is important to me to have complete system/hard disk encryption.

You want to also encrypt boot partition and leave only ESP partition unencrypted.

I would be very grateful if someone could give me some tips and input on how to install Linux Mint with encryption.

My suggestions so far are how it's done on Debian, Mint procedure may differ, but please wait until Mint users jump in here.

 

[CaffeineAddict]

@LinusVSLinux
Here is tutorial that provides some hints about encrypted LVM setup on Mint:

Install Linux Mint 21.1 with Custom LVM on LUKS ☯ Daniel Wayne Armstrong

Libre all the things

www.dwarmstrong.org

Don't know if it isn't out of date but it's a good start because there are screenshots.

 

[LinusVSLinux]

Thank you very much for your reply.

I have now solved the problem by removing the hard drive with Windows 11. I then installed Linux Mint and was able to enable LVM with encryption in the installation manager via advanced settings. This resulted in full encryption.

Many thanks to everyone for their helpful assistance.