Skip to content

Automatic full disk encryption for Oracle Cloud

The supported-image table below is for one path: assisted setup on fresh, unencrypted Oracle Cloud images. It is not the full Panocrypt-managed unlock compatibility boundary.

If a Linux system already uses LUKS, or you set up LUKS yourself on another provider or distro, you can usually bind an unused keyslot to Panocrypt with your distro’s cryptsetup, Clevis, and the standard Clevis tang pin. No Panocrypt host software is required for that path. Start with Bind an existing LUKS volume or Bind an existing encrypted root disk.

Use this page when you want the Panocrypt setup helper to run from cloud-init/user-data, set up LUKS on the root disk, bind managed boot unlock, and verify encrypted boot.

DistributionVersions
Ubuntu22.04, 24.04
GoalGuide
Understand the two Panocrypt pathsWhat runs on your server
Understand assisted setupAssisted fresh-server setup
Preserve recovery materialAssisted setup recovery material
Compare provider setup pathsAssisted setup providers
Learn how LUKS keyslots make removal simpleLUKS keyslots