I'm trying to figure out what I want to do with this as well. I'd prefer not to fully crypt root either as I'd rather not have the hassle and performance hit for accessing unimportant data. Scripting this: kernel cmdline (grub/lilo): init=/linuxrc /linuxrc: #!/bin/sh ##get password(YMMV) and 'mount -n' partition with /etc ##mount other partitions with /var/log, and so on..... exec /sbin/init #Normal boot will proceed. Will get you around having to maintain any sort of an initrd system. There are otherways to do it, but this mucks least with your 'normal' boot sequence. The only problem here is syncing /etc/mtab up with the information of the partition /etc is on. I think this must be done by 'hand' (IE echo >>/etc/mtab), as -o remount doesn't seem to update mtab. Dave - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
