You are not logged in.

#1 2017-06-15 02:27:45

174gjc
Member
Registered: 2017-06-15
Posts: 1

Suggestions on Disk Encryption Layout

So, I am currently dual-booting Windows and Arch, and I have one encrypted partition (LUKS) with rEFInd as my boot manager. I intend to add Shim to support secure boot, but I was wondering what the best way to encrypt my other partitions is. Since I'm dual booting and I would rather not change my boot manager to GRUB (I have a pretty cool customization on rEFInd), I want to know the best way to prevent logical tampering and at-rest data retrieval. Namely, if we could get the boot partition encrypted or at least check it for tampering with some sort of checksum, that would be optimal.

Also, my partition scheme is as described here (https://wiki.archlinux.org/index.php/pa … partitions) plus the default Windows partitions (My boot partition is the default Windows EFI partition).


This is the output from fdisk -l:

Disk /dev/nvme0n1: 477 GiB, 512110190592 bytes, 1000215216 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: BACFF80F-AC63-4E48-8585-98439F6500F7

Device              Start        End   Sectors  Size Type
/dev/nvme0n1p1       2048     534527    532480  260M EFI System
/dev/nvme0n1p2     534528     567295     32768   16M Microsoft reserved
/dev/nvme0n1p3     567296  493449215 492881920  235G Microsoft basic data
/dev/nvme0n1p4  978653184  980074495   1421312  694M Windows recovery environment
/dev/nvme0n1p5  980074496 1000204287  20129792  9.6G Microsoft basic data
/dev/nvme0n1p6  493449216  556363775  62914560   30G Linux filesystem
/dev/nvme0n1p7  556363776  682192895 125829120   60G Linux filesystem
/dev/nvme0n1p8  682192896  711553023  29360128   14G Linux filesystem
/dev/nvme0n1p9  711553024  837382143 125829120   60G Linux filesystem
/dev/nvme0n1p10 837382144  978653183 141271040 67.4G Linux filesystem

Thanks for the help, and I apologize for the difficult question on the Newbie Corner, but as this is my first post, I didn't want to put it elsewhere.

-174

Offline

Board footer

Powered by FluxBB