Since we understand the basics of partitioning schemes, let's spend some time understanding encryption schemes that are available in Linux.
Remember that if we encrypt a partition that contains files that are needed to boot the system, such as kernel, then the system will become unbootable. Try it yourself!
In order to have a full disk-like encryption, we need to have /boot in a separate partition and then encrypt the data of other partitions. This is illustrated in the following diagram:
![](https://static.packt-cdn.com/products/9781788299558/graphics/assets/2e956b29-e695-428d-8f61-5bcb0c61061f.png)