Re: Setting up /boot when it is not a separate partition

[Colin Walters <walters verbum org>]

On Mon, Jul 20, 2015, at 05:08 PM, Chris Murphy wrote:

> However, GRUB has supported cryptoluks for a long time, and dracut
> supports key files for a while, so it's possible to do single LUKS
> passphrase at GRUB to get to a login prompt. And all of this is
> stable. The problem is the RH/Fedora installer doesn't support this
> configuration.

Interesting, I didn't know that.  It means you don't get the nicer
Plymouth prompt but I guess that's not a big deal.  There are
likely other tradeoffs I'm not thinking of.

But yeah, as long as Anaconda defaults to separate /boot
for dm-crypt, I want to maintain OSTree support for it.

It'll be interesting to see the progress down the line for
encryption in the filesystem https://lwn.net/Articles/639427/
which will make this whole area a lot more flexible.