Hello, I'd like to have a fully encrypted laptop (all except /boot/ , incl. / and swap) with leap 42.1. The Installer doesn't let me encrypt / (when clicking "encrypt" a message says it's not possible to encrypt / ) I know there is a possibility to use an LVM (I'd have to update my forgotten knowledge, though :-) ), BUT - my system / will be on a SSD, while the rest (/home) will be on a normal HD. As far as my searches showed me, it is not an intelligent choice to put an SSD and a normal HD in an LVM... My notes about encrypting a system using Luks are outdated from 2008, when no UEFI, no secure-boot and no GRUB2 existed... I don't know, if boot.crypto still would works, and then I don't know how to tell GRUB2 to use the new initrd that was created during the encryption-process... ( My old procedure was in short: - Install system on the disk where later /home will be - make /home where later / will be - encrypt the now /home and move the system there - encrypt the now / - making crypttab entries and adjust fstab - make a new initrd - tell Grub to use root=dev/mapper/root ) but times have changed... Google did not help me :-( Can you help me to achieve my goal (have unencrypted /boot and encrypted system on SSD and encrypted /home and /swap on HD with only one passphrase at boot)? Thanks for hints, links to uptodate-how-to's... Daniel -- Daniel Bauer photographer Basel Barcelona http://www.daniel-bauer.com room in Barcelona: https://www.airbnb.es/rooms/2416137 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org