Dne úterý 21. července 2020 9:05:04 CEST, Stakanov napsal(a):
The system is old, thus not really running into the UEFI problem, but has a TMP, which governs also the HDD. So kind of "legacy with secure boot". Installation (as this is a laptop) should be as safe as possible, without going to far to put the boot partition onto a usb key, that would be overkill. I had so fare a /boot (unencrypted) and an LVM with / (root /home and swap) encrypted. I know that Leap has made some progress on this behalf and wanted to know: what are the available options for an encrypted install, what are advantages / disadvantages you think worth of notice and although I googled and found some, if you have some link with important information about this, feel free to share. File system: EXT4 on all partitions with exception of boot were it was up to now ext2. Space: it is a 500 GB disk with now /boot (400 mb), /swap 8GB (I have 8 GB of RAM and do often suspend to disk), /root 58 GB (this is a lot, but given all the debug libraries and that I have a lot of software installed, makes the system safe for some "upgrades"). /home (403 GB). I am looking forward on suggestions about available options.
I use unencrypted /boot/efi and then encrypted LVM containing everything else (i.e. / and swap). The only problem is that I have to enter password twice, otherwise it works perfectly without any issue or performance loss. This is easily configurable in YaST installer. You can also add password for GRUB. HTH, -- Vojtěch Zeisek https://trapa.cz/ Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/