Thanks everybody for the help. My error was that I had only an unencrypted /boot/efi (which I thought would have replaced /boot)... So now I have: sdb (SSD) sdb1: /boot/efi (FAT) sdb2: /boot (EXT2) sdb3: encrypted raw, - within that LVM and within that - / (EXT4) sda (HD) sda1: encrypted raw, - within that LVM and within that - swap - /home (EXT4) at boot the passphrase is asked once and then it boots lightning fast. So now in search to solve the other problems :-) Thanks a lot for the help to everybody! Daniel Am 01.03.2016 um 15:12 schrieb Vojtěch Zeisek:
Dne úterý 1. března 2016 11:32:23 CET, Daniel Bauer napsal(a):
I'd like to have a fully encrypted laptop (all except /boot/ , incl. / and swap) with leap 42.1.
I do this very commonly and without problems. So:
There is just one disk, create: 1) unencrypted /boot (ext4) 2) if on UEFI system, unencrypted /boot/efi (fat) 3) encrypted LVM and within it a) / (whatever FS) b) /home (if You like that division, I don't) c) swap
There are two disks (e.g. SSD for system): Disk A (e.g. SSD for system): 1) unencrypted /boot (ext4) 2) if on UEFI system, unencrypted /boot/efi (fat) 3) encrypted LVM and within it a) / (whatever FS) b) swap Disk B: 1) encrypted /home (XFS or ext4) Of course, You can decide where to have swap. In any case, as it is not possible to encrypt /, there must be encrypted LVM on disk A. If swap would be on disk B, there would be encrypted LVM containing /home and swap.
HTH
-- Daniel Bauer photographer Basel Barcelona http://www.daniel-bauer.com room in Barcelona: https://www.airbnb.es/rooms/2416137 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org