9

I want to boot the Linux from the /boot partition, and also want to encrypt this /boot partition.

[ AFAIK, Grub is unable to find the kernel and initrd from an truecrypted partition or cryptsetup encrypted boot partition. ]

Is there any way to do so ?

Improve this question
1
  • Just one remark -- encrypting entire system except /boot is supported by default. This means, that if you fall into problem with your system, you probably fix it easier than in case with /boot encrypted as well.
    – greenoldman
    Apr 20, 2011 at 5:07

1 Answer 1

Reset to default
6

Yes, using Grub2 you can do this: It has been patched to support not only AES, Twofish, Serpent and CAST5 encryption, but a number of hashing routines such as SHA1, SHA256, SHA512, and RIPEMD160. There is also support for the LUKS on-disk encryption format.

Check out this xercestech post for a full manual walkthrough, but in a nutshell everything is encrypted except for the actual bootloader, which you could have on a USB stick if you really wanted to stay safe.

The LUKS patches to support grub are here.

Improve this answer
2
  • Thanks Rory.... I will follow the tutorial and will give you feedback. BTW, the link is broken, it seems. If you have the michael.gorven.za.net/bzr/grub/luks., please do share with us.
    – SHW
    Apr 20, 2011 at 5:40
  • Trim the period off the end of that URL and it will work.
    – blee
    Nov 25, 2013 at 5:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .