How to "luks" without physical installation

rwanito

Member
May 25, 2021
15
0
21
26
Hello everyone,

I’m currently using a server hosted by OneProvider. They offer an “automatic” installer for Proxmox VE 7, but it doesn’t allow any customization during the installation—specifically, no options for partitioning.

As it stands, when Proxmox boots up, the default setup is:
  • 2x2TB drives configured in RAID 1, formatted with EXT4

Bash:
NAME    MAJ:MIN RM  SIZE RO TYPE  MOUNTPOINTS
sda       8:0    0  1.8T  0 disk 
├─sda1    8:1    0  511M  0 part 
│ └─md0   9:0    0  510M  0 raid1 /boot
├─sda2    8:2    0  1.8T  0 part 
│ └─md1   9:1    0  1.8T  0 raid1 /
└─sda3    8:3    0  513M  0 part  [SWAP]
sdb       8:16   0  1.8T  0 disk 
├─sdb1    8:17   0  511M  0 part 
│ └─md0   9:0    0  510M  0 raid1 /boot
├─sdb2    8:18   0  1.8T  0 part 
│ └─md1   9:1    0  1.8T  0 raid1 /
└─sdb3    8:19   0  513M  0 part  [SWAP]

When lvdisplay shows nothing too.

Right now, I’m in the process of migrating from Proxmox VE 7 to Proxmox VE 8 before proceeding with any further configurations.
I’ve read some articles recommending a single partition approach, such as this one: https://dustri.org/b/hardening-proxmox-against-physical-attacks.html.
Additionally, I’ve come across many resources that suggest using full disk encryption combined with ZFS for better security.

Given my current constraints—specifically the automatic installer formatting everything as EXT4 without partition options—how would you suggest I implement disk encryption on this server?

I’m considering whether installing Debian 11 manually, with custom partitioning, and then adding the Proxmox layer on top could be a viable starting point.
Capture d’écran 2025-07-20 à 22.58.33.png

However, all the tutorials and guides I’ve found focus mainly on ZFS setups and not EXT4.

I’m relatively new to partitioning and encryption in this context, so any advice or guidance you could provide would be greatly appreciated!
Thank you in advance!
 
Last edited: