Le 15/09/2018 à 00:45, Matthew Crews a écrit :
On Friday, September 14, 2018 10:58 AM, Pascal Hambourg
<pas...@plouf.fr.eu.org> wrote:
Actually you can have / including /boot on LUKS with GRUB. It is just
not natively supported by the Debian installer.
Oh really? I might need to look into that. Where can I learn more?
You must add GRUB_ENABLE_CRYPTODISK=y into /etc/default/grub before
running grub-install and update-grub/grub-mkconfig.
Quote from https://www.gnu.org/software/grub/manual/grub/grub.html :
‘GRUB_ENABLE_CRYPTODISK’
If set to ‘y’, grub-mkconfig and grub-install will check for
encrypted disks and generate additional commands needed to access them
during boot. Note that in this case unattended boot is not possible
because GRUB will wait for passphrase to unlock encrypted container.