diff --git a/debian/changelog b/debian/changelog
index 85db081..0c820f2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+calamares-settings-ubuntu (22) cosmic; urgency=medium
+
+  * Lubuntu: enable LUKS/encryption. 
+
+ -- Walter Lapchynski <wxl@ubuntu.com>  Thu, 04 Oct 2018 22:02:57 -0700
+
 calamares-settings-ubuntu (21) cosmic; urgency=medium
 
   * Lubuntu: remove all password checking.
diff --git a/lubuntu/modules/grubcfg.conf b/lubuntu/modules/grubcfg.conf
new file mode 100644
index 0000000..2714306
--- /dev/null
+++ b/lubuntu/modules/grubcfg.conf
@@ -0,0 +1,3 @@
+overwrite: false
+defaults:
+    GRUB_ENABLE_CRYPTODISK: true
diff --git a/lubuntu/modules/packages.conf b/lubuntu/modules/packages.conf
index baad3a2..b6f0669 100644
--- a/lubuntu/modules/packages.conf
+++ b/lubuntu/modules/packages.conf
@@ -1,6 +1,7 @@
 backend: apt
 operations:
   - remove:
+      - '^live-*'
       - "calamares-settings-lubuntu"
       - "calamares"
       - "hunspell-en-us"
diff --git a/lubuntu/modules/partition.conf b/lubuntu/modules/partition.conf
index 955b5dc..4a75579 100644
--- a/lubuntu/modules/partition.conf
+++ b/lubuntu/modules/partition.conf
@@ -1,4 +1,4 @@
 efiSystemPartition: "/boot/efi"
-enableLuksAutomatedPartitioning: false
+enableLuksAutomatedPartitioning: true
 neverCreateSwap: true
 drawNestedPartitions: true
diff --git a/lubuntu/settings.conf b/lubuntu/settings.conf
index 6b44310..b5985ac 100644
--- a/lubuntu/settings.conf
+++ b/lubuntu/settings.conf
@@ -32,11 +32,14 @@ sequence:
   - locale
   - keyboard
   - localecfg
+  - luksbootkeyfile
   - users
   - displaymanager
   - networkcfg
   - hwclock
+  - initramfscfg
   - initramfs
+  - grubcfg
   - contextualprocess@before_bootloader_mkdirs
   - contextualprocess@before_bootloader
   - bootloader