Bof.

No theme, no regular posting.

© 2014-2018. Raphaël Rigo CC-BY-SA 4.0

About.

Encrypted /boot in Debian Buster

Goals & Prerequisites

The goal is to have a fully encrypted Linux root partition, including /boot. Then, hopefully, enabling secure boot.

Use UEFI, have a EFI system partition, as Grub will be stored on it.

Installing

Use the normal Debian installer, but it will fail when trying to install grub.

To fix the problem:

Now grub should support crypto disks and install correctly

Caveats

TODO