Customize LUKS options during install

[ae5960e8-a6fc-491f-b252-898ecf59af95]

Is your feature request related to a problem? Please describe.
The default LUKS encryption options do not meet the needs of some use cases.

Describe the solution you'd like
Introduce a feature that allows users to specify their encryption preferences through a configuration file, luks_config.conf, which can be edited within the live environment. This would enable users to customize the default settings for cipher, key size, hash algorithm, PBKDF options, and header label according to their specific requirements.

Describe alternatives you've considered
Currently, there appears to be no option to modify the default LUKS settings used by the installer, which restricts users to a one-size-fits-all approach.

Additional context
Security researchers have differing opinions on the "most secure" configuration. Allowing informed users to customize their settings creates a more complex challenge for attackers, enhancing overall security.

[dalto8]

Two comments from me:

• If these options were to be added, from a Calamares perspective, I think they would belong in partition.conf with the other luks-related settings.
• Does kpmcore support specifying these options? If it does, this would be fairly easy to implement I think. If not, support would need to be added there first.

[ae5960e8-a6fc-491f-b252-898ecf59af95]

I’m new to modifying Calamares and would appreciate any guidance on locating the current LUKS configuration in the source code or any relevant files within the installation environment. Any pointers would be helpful.

[dalto8]

They are in the partition module or something that is called from that module.

Unfortunately, that is the most complicated module and a bit of a tough place to start. That being said, you can pretty easily search it for "luks" and find all the places luks-related things are happening.