On 7/21/20 2:05 AM, Stakanov wrote:
The system is old, thus not really running into the UEFI problem, but has a TMP, which governs also the HDD. So kind of "legacy with secure boot". Installation (as this is a laptop) should be as safe as possible, without going to far to put the boot partition onto a usb key, that would be overkill.
I had so fare a /boot (unencrypted) and an LVM with / (root /home and swap) encrypted. I know that Leap has made some progress on this behalf and wanted to know: what are the available options for an encrypted install, what are advantages / disadvantages you think worth of notice and although I googled and found some, if you have some link with important information about this, feel free to share.
File system: EXT4 on all partitions with exception of boot were it was up to now ext2. Space: it is a 500 GB disk with now /boot (400 mb), /swap 8GB (I have 8 GB of RAM and do often suspend to disk), /root 58 GB (this is a lot, but given all the debug libraries and that I have a lot of software installed, makes the system safe for some "upgrades"). /home (403 GB).
I am looking forward on suggestions about available options. Regards.
Thank you.
Why not a dm-crypt luks solution? See general scenarios: https://wiki.archlinux.org/index.php/Dm-crypt and then the specific links from that page, e.g. https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org