LUKS

Since we understand the basics of partitioning schemes, let's spend some time understanding encryption schemes that are available in Linux.

Remember that if we encrypt a partition that contains files that are needed to boot the system, such as kernel, then the system will become unbootable. Try it yourself!

In order to have a full disk-like encryption, we need to have /boot in a separate partition and then encrypt the data of other partitions. This is illustrated in the following diagram:

Introduction to LUKS

LUKS stands for Linux Unified Key Setup-on-disk-format, and it allows us to encrypt partitions on Linux systems. This is particularly important in laptops that might have some critical data.

Let's take...