Le 29/12/2017 à 11:02, deloptes a écrit :
microsoft gaofei wrote:I'm thinking about a question ,how my hard disk admits so much data ? If /boot partition is encrypted , then how does my hard disk admit GRUB ? sudo fdisk /dev/sda , and press o to create a DOS partition table . This software starts on sector 2048 by default . So how does the 2048 sectors admit GRUB to achieve encrypted /boot ?
FWIW, here is what I replied to the OP's private mail :GRUB core image embeds all the required modules to read /boot/grub, including crypto modules when /boot/grub is encrypted.
2048 512-byte sectors is 1 MiB. GRUB BIOS core image does not need so much space. GRUB BIOS was developed at a time when partition alignment was based on "cylinders", so the first partition usually started at sector 63. GRUB BIOS core image was initially designed to fit in that 30 KiB space. It has grown a bit over time and is sometimes slightly bigger than 30 KiB, but 1 MiB is still plenty of space.
A copy of GRUB BIOS core image is kept in /boot/grub/i386-pc/core.img, so you can see its size.
you don't encrypt boot
Why not ?