-----Original Message----- From: users-bounces@lists.fedoraproject.org [mailto:users-bounces@lists.fedoraproject.org] On Behalf Of Heinz Diehl Sent: Monday, July 15, 2013 8:50 AM To: users@lists.fedoraproject.org Subject: Re: install /boot with encrypted partition
On 14.07.2013, Ranjan Maitra wrote:
So, I tried to encrypt the disk (option in Fedora) and failed because /boot can not be in encrypted partition.
The /boot partition must of course remain unencrypted, otherwise you can't boot your encrypted system at all.
Are you sure about that? Afaicr grub2 was supposed to be able to have /boot inside the encrypted area. (there still remains some unencrypted disk-blocks though)
______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het electronisch verzenden van berichten.
This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.
On 07/15/2013 01:13 PM, J.Witvliet@mindef.nl wrote:
Are you sure about that? Afaicr grub2 was supposed to be able to have /boot inside the encrypted area. (there still remains some unencrypted disk-blocks though)
This is the first time I hear that, and I wonder what kind of messy hack that would have to be.
A separate /boot with kernels, initramfs, memtest86+, looks like a saner approach. The encrypted part will happily contain everything else (the system, your data, the swap, including the hibernation data).
Best regards.
Yes, i have changed the grub configuration.
The solution is to try to install an other OS to make the good configuration.
----- Mail original ----- De: "Roberto Ragusa" mail@robertoragusa.it À: "Community support for Fedora users" users@lists.fedoraproject.org Envoyé: Lundi 15 Juillet 2013 19:15:04 Objet: Re: install /boot with encrypted partition
On 07/15/2013 01:13 PM, J.Witvliet@mindef.nl wrote:
Are you sure about that? Afaicr grub2 was supposed to be able to have /boot inside the encrypted area. (there still remains some unencrypted disk-blocks though)
This is the first time I hear that, and I wonder what kind of messy hack that would have to be.
A separate /boot with kernels, initramfs, memtest86+, looks like a saner approach. The encrypted part will happily contain everything else (the system, your data, the swap, including the hibernation data).
Best regards.
On 16.07.2013, J.Witvliet@mindef.nl wrote:
The /boot partition must of course remain unencrypted, otherwise you can't boot your encrypted system at all.
Are you sure about that? Afaicr grub2 was supposed to be able to have /boot inside the encrypted area. (there still remains some unencrypted disk-blocks though)
Never heard that grub2 should be able to do that. Besides: I don't see the point. The /boot partition doesn't contain anything worth copying for an adversary. And if he/she already has/had physical access to your machine, you're hosed..