Can you even fully encrypt a system?

post-factum · 2015-10-03 21:10:46

It is possible to fully encrypt your system. And it really works for me with the following disk layout:

[~]$ lsblk
NAME                MAJ:MIN RM   SIZE RO TYPE   MOUNTPOINT
sda                   8:0    0 238.5G  0 disk   
└─sda1                8:1    0 238.5G  0 part   
  └─md0               9:0    0 238.4G  0 raid10 
    └─system        253:0    0 238.4G  0 crypt  
      ├─system-boot 253:1    0   512M  0 lvm    /boot
      ├─system-swap 253:2    0    16G  0 lvm    [SWAP]
      └─system-root 253:3    0 221.9G  0 lvm    /
sdb                   8:16   0 238.5G  0 disk   
└─sdb1                8:17   0 238.5G  0 part   
  └─md0               9:0    0 238.4G  0 raid10 
    └─system        253:0    0 238.4G  0 crypt  
      ├─system-boot 253:1    0   512M  0 lvm    /boot
      ├─system-swap 253:2    0    16G  0 lvm    [SWAP]
      └─system-root 253:3    0 221.9G  0 lvm    /

byte · 2015-10-03 23:02:56

Same here. I've booted from external media (USB sticks, SD cards, etc.) ever since I started using Arch (2006).
Never partitioned any disks, never used swap, always LUKS on whole device (sometimes with MD raid below), and then LVM on top.

post-factum · 2015-10-04 07:38:51

The difference is that I do not boot from external media, because GRUB2 perfectly handles RAID10 as well as LUKS ans LVM.

Arch Linux

#26 2015-10-03 21:10:46

Re: Can you even fully encrypt a system?

#27 2015-10-03 23:02:56

Re: Can you even fully encrypt a system?

#28 2015-10-04 07:38:51

Re: Can you even fully encrypt a system?

Board footer