[gentoo-user] Re: Full system encryption on Gentoo

[Hans]

I can't follow Sakaki's_EFI_Install_Guide. The system will run in 
VirtualBox and only have BIOS. No UEFI, EFI, USB stick as boot or key disk.

OpenSuse 42.1 boots from a encrypted single LVM volume on a MSDOS drive, 
single partition, using grub2 as boot manager, and systemd.

I just have to find a way to get the same result using Gentoo with 
OpenRC and if possible without LVM.  Entering the pass phrase several 
times is no problem.

Hans


On 31/12/15 03:53, Roman Dobosz wrote:
> On Wed, 30 Dec 2015 07:34:52 +1000
> Hans <linux@××××××××××××××.au> wrote:
>
>> Is it possible to fully encrypt a Gentoo system as can be done with
>> Fedora, Suse, Arch Linux, Debian and Ubunto without using a unencrypted
>> USB boot stick or unencrypted /boot partition?
>>
>> If yes, where can I find instructions that really work on a BIOS only
>> box without UEFI, EFI, systemd using EXT4 file system?
>
> It's definitely possible - for both usb stick or ordinary boot
> partition, although it's not quite the same as in distros you've
> mentioned, since it require either custom made initramfs or some
> utility which would made one for you (like dracut, genkernel etc).
>
> There is several guides which might be useful, just google for one.
> It doesn't have to be gentoo specific, since the install procedure is
> almost the same, the only difference is the choice of medium for
> booting up the encrypted system, bootloader and fstab configuration,
> partition layout (with/without lvm) and so on. One of teh most
> comprehensive guide about the topic is the Sakaki's EFI Install
> Guide [1]. Yeah, I know there is "EFI" word, but it doesn't matter -
> you can just skip the part with efi partition and make your own
> pendrive (using syslinux) or create unencrypted boot partition :)
>
> [1] https://wiki.gentoo.org/wiki/Sakaki%27s_EFI_Install_Guide
>