On 08/15/2018 12:27 AM, Pascal Hambourg wrote:
Le 15/08/2018 à 05:36, David Christensen a écrit :
On 08/12/2018 11:01 AM, Pascal Hambourg wrote:
Mind to explain why should /boot be on a separate partition ?
Primarily because I often use dm-crypt on swap and root;
Plain dm-crypt or LUKS ?
Whatever d-i sets up.
boot must be unencrypted.
Only if using plain dm-crypt. GRUB can handle LUKS encryption on /boot.
I have no doubt that people have figured out many other approaches to
encryption. I prefer KISS, so I use what d-i offers.
David
