encrypted /boot

[J.Witvliet]

Hi all,

A message on one of the distro-lists got my attention.
Someone wanted to include /boot in their encrypted area.

Normally one makes a separate partition for /boot, and put everything else in a 
LUKS volume-group.

But I remembered that someone claimed that he/she succeeded with grub2, to 
protect /boot also.
Unfortunately, google only comes up with dead references.

Only thing I remembered of it, that it uses a number of disk blocks, not 
belonging to any partition.
Anyone around to refresh my memory ?


Hw



______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet 
de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u 
verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat 
aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband 
houdt met risico's verbonden aan het electronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are 
not the addressee or if this message was sent to you by mistake, you are 
requested to inform the sender and delete the message. The State accepts no 
liability for damage of any kind resulting from the risks inherent in the 
electronic transmission of messages.