Hi, this could also be a good idea: http://www.ubuntuforums.org/showthread.php?t=120097&highlight=cryptsetup
encryption of harddrives from the scratch. However, I would create a small partition where there will be keys (files) for decryptig root and home partitions. This small partition would be encrypted by passphrase. That means you can easily (well... :-//) change your passphrase for the system (just re-encrypt this small partition with keyfiles againg). The only critical software part is then /boot partition. But you can always fill the /boot up to 100% with random data and run Tripwire integrity checking on it. If it is full, it is hard to write additional code on it. And if you do integrity checking, you can easily discover if something changed. I am planning to write a small setup guide for cryptsetup on Dapper version of Ubuntu Linux. bye, Matej