[arch-general] Kpartx should be in the repos and archiso for enabling encrypted GPT install

Eli Schwartz eschwartz at archlinux.org
Sun Jan 13 22:41:13 UTC 2019


On 1/13/19 5:27 PM, Eli Schwartz wrote:
>> I want full disk encryption. There is nothing controversial about FDE,
>> it is already covered in the Wiki, except that I want FDE without LVM.
> 
> You can have FDE without LVM today, using the suggestion I just provided
> and you ignored.
> 
> Unless you mean that it's not really FDE if attackers can read the
> partition table layout, in which case LVM is not valid as FDE and you'd
> better buy yourself some proprietary hardware-encrypted solution.

... forgot lvm supports installation without a partition table. Still
don't see the practical downside of having an unencrypted partition table.

-- 
Eli Schwartz
Bug Wrangler and Trusted User

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1601 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20190113/df8693a2/attachment.asc>


More information about the arch-general mailing list