-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I hope this is the right place to ask, if not kindly give me a kick in the right direction. I'm currently in the process of setting up my new notebook and (possibly foolishly) decided to get a bit more fancy this time (currently I just used FDE, which worked out of the box). What I'd like to achieve is something like the following: /dev/sda4 --> / (unencrypted) /dev/sdb2 --> crypt_LUKS /mnt/data And then bind-mount stuff thats worth encrypting (/etc, /home, /var, ...) from /mnt/data. I've been playing with the fstab.sys stuff to get the mounts set up before the real system continues booting, but I can't seem to get it quite right. Before I waste any more time with this, or reinvent an existing wheel by trying my hand at a dracut-module I thought I'd ask here for any tips. Or possibly for someone telling me that this is a stupid idea to begin with and I should just set up FDE again ;) Thanks in advance, Andy -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETO5sBHZ40QsISAeRPjKZR38oUbAFAlinLfQACgkQPjKZR38o UbDUIxAAhyXwNsuXh75OerYcFKS8+UHIqvWOuZaphQM1hwAjDsjvTTe95/yCOUzG dHnDOkAntED/HDL8X7M5TBAN9OgF01DbMJEVplFMIJGqBHUNd0GB6VIE7IaZU0Xm yAIoRLFks1Zm9o8W9cm7dbvZny4hzsvMzGTiyJtKFNSThnJJkbW+VTs5OMLFKs7d zFDEjpoXp55C20mTKGz59HGWA86JcsxB5WMEBgoa/GW9SIdsJTlQzLGf84urIDp5 W0N7lm8XBZFrtTKrXQmOf1bGYNc/rq1uKPJHz/6U0aWiZrtF+9JiSZy5v0etBr79 42DmKZqTIfO/fx/9yF4sR43GBlXF5tGp0P1qTm1Sxhp0YAFcQibl37dbAPXXU89R tNSton+LtvTw+cptlnIjxMuuOeEXAWS+C08xbkrzx8X3A7DtfCd/m/qlyU2Eh7X0 HY7DwyzV0GGGj/csIyx+126mpPyHVIEXOmwHPk3+rBuqe9T/6XY5xSK0vxDwXld7 Adjvxs6vPQ5fwyfsYKzN6VQiOrkN09Z32kx0Ye08SxeAI003dJWQlBZoX7tEsU75 o0re9jKDB64trtdjoOzXcalSsjM4BR3JOeKYcooD+Kvy/R83Jc5HnH1o+ZJMmXfT zoOSBt8loAuDcR9WAkg0eeNN3pF+q5zlSb7OexMAwLuj/NWnxCY= =+wCG -----END PGP SIGNATURE----- -- To unsubscribe from this list: send the line "unsubscribe initramfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html