I have found the following example configuration for a system encryption:
Example 5: paranoid system encryption
• whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, using dedicated passphrase + USB stick with keyfile (different one issued to each user - independently revocable) • /boot partition located on aforementioned USB stick
However I didn't find any details.
Does it mean that it is possible to have a full system encryption where each user partition has its own passphrase such that for example when one user is logged in, he cannot read the data of another user who is not logged in because his data is encrypted? (Similar as it would be the case if you encrypt different home partitions with
So can somebody provide some details how this works in practice and how to set it up in an ubuntu system?