On Wed, Jul 03, 2019 at 08:59:26AM -0400, Sam Hartman wrote: > The rationale is that on systems with full disk encryption the initramfs > probably isn't encrypted > > I personally think sticking your full disk encryption keys onto the > initramfs doesn't have a lot of value. These two things are linked, actually. You put the encryption key into initramfs, put initramfs on the encrypted partition and get real full disk encryption while entering the passphrase on boot only once. -- WBR, wRAR
Attachment:
signature.asc
Description: PGP signature