Encrypted Root with F11

[Brian Mearns]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sometime prior to 09:29 25 Jun 2009, davide<lists4davide at gmail.com>
    wrote:
> Brian Mearns <bmearns <at> ieee.org> writes:
>
>
> > So can anyone help me get this set up properly? I have a basic
> > understanding of the boot process and I guess that something
> > needs to be changed in initrd to tell it to unlock the encrypted
> > root disk before mounting it. But I have no idea how to do that.
>
> you do not mention your /boot partition, where is it? is it on
> a clear (ext3) partition? grub cannot mount a encrypted partition.
>
> I set up a F11 recently with LVM-over-dm-crypt. To do it, I
> followed a nice guide found on the internet, basically you start
> with a live cd (the fedora one), create the dm-crypt volume,
> mount it, create the LVM setup, start the installation, mount
> all the stuff as it is supposed to be mount and it's done.
>
>
> (probably grub ask about the root partition just coz it need it
> for stuff like modules, logs, /dev and so on...)
[clipped]

Thanks for the response, Davide. /boot is a seperate, non-LVM
partition with its own ext3 fs. I know F11 has options for
encrypting during setup, but I've already got it set up, and would
now like to go back and switch over to an excrypted root filesystem
without having to reinstall. I think your suggestion of using a Live
CD implies that I would reinstall Fedora, which I don't want to do.

Also, it's not grub asking for the root, I'm referring to the "root"
parameter for the kernel.

Thanks,
- -Brian

- --
Feel free to contact me using PGP Encryption:
Key Id: 0x3AA70848
Available from: http://keys.gnupg.net


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJKQ3zCAAoJEHOUulIkSI7catQIALMaL4cqC6a40QJSpRwYbvL8
BSebgkXWGHYWAvBMyEyWDpzOwiY2+ZS821sdtZ4uiG/XIZeEDa8XP4vive1hGwm2
1A1F7AL7y7AwoTc4FZ2xKxDfFsn/Tr45r7TUoYfml/7IaVkUuR9KXYYkHbj1CYOb
055tMUWMYv/VonKLoqTiozfsh9V6QUdwvTqjyrVgJL+R0F84MMcB6uodB6/3+zcK
qpr8316xwySXk1r76Y0G6h+Q1DC8OQIJsLeBt8FK09iGM26ApcXgh3gpO9PrtV9B
a9w+xuHQz2Ampej2/Jun52cM/Ez19FpMqccT2HuHuOetPby9wBd4XKdCIEyHuAw=
=8D50
-----END PGP SIGNATURE-----