Web lists-archives.com

Re: Possible for full-disk encryption to encrypt /boot as well?




On Fri, 25 May 2018 11:55:34 -0700
Robert Dodier <robert.dodier@xxxxxxxxx> wrote:

> Hello,
> 
> I'm working with Debian 9. I gather that there is a full-disk
> encryption option for the standard Debian installer, which, as I
> understand it, does not include encrypting /boot. (The system I'm
> working on wasn't encrypted when it was installed, so the system would
> have to be reinstalled, that's OK.)
> 
> The only description of encrypting /boot that I was able to find is:
> https://gist.github.com/ppmathis/ccfbfce86484dc61834c1f17568d7b80
> I wonder if there is any simpler approach.
> 
> Is it possible that, perhaps, other Linux distributions have an option
> for encrypting /boot? I wasn't able to find any information about
> that.

https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_.28GRUB.29

Celejar