On Fri, Jul 31, 2015 at 3:37 PM, Gordon Messmer <gordon.messmer@xxxxxxxxx> wrote: > On 07/31/2015 12:02 PM, inode0 wrote: >> >> /boot can be on an encrypted partition. I've been looking at this >> lately and decided to try to do it after seeing this thread today. >> Anaconda won't help you do it though, so you need to install initially >> with it unencrypted but you can encrypt it post-install. Now I have an >> F22 box with a single disk with all partitions encrypted. > > > Uh... have you rebooted yet? What does "lsblk" output? A skeptic! [root@localhost ~]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 16G 0 disk ├─sda1 8:1 0 500M 0 part │ └─fedora-boot 253:3 0 498M 0 crypt /boot └─sda2 8:2 0 15.5G 0 part └─luks-e7300273-cada-4e28-9829-7302ec188c29 253:0 0 15.5G 0 crypt ├─fedora-swap 253:1 0 1.6G 0 lvm [SWAP] └─fedora-root 253:2 0 13.9G 0 lvm / sr0 11:0 1 876M 0 rom grub2 supports LUKS. You'll need to add GRUB_ENABLE_CRYPTODISK=y to /etc/sysconfig/grub, run grub2-mkconfig and grub2-install, and make any changes you desire to fstab and crypttab after encrypting /boot. John -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org