{"id":570,"date":"2024-07-02T23:42:49","date_gmt":"2024-07-02T21:42:49","guid":{"rendered":"https:\/\/xpam.pl\/blog\/?p=570"},"modified":"2025-10-21T22:46:53","modified_gmt":"2025-10-21T20:46:53","slug":"encrypted-boot-drive-on-debian-without-lvm","status":"publish","type":"post","link":"https:\/\/xpam.pl\/blog\/?p=570","title":{"rendered":"Encrypted root on Debian without LVM"},"content":{"rendered":"<p>If you want to set up encrypted boot drive through Debian Installer you are only given an option to use LVM in the guided process. If you don't want to use LVM the setup is a bit more involved so I am documenting it here.<\/p>\n<p>If you want to try this in virt manager, make sure to select UEFI in VM settings.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000042.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-604\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000042.png\" alt=\"\" width=\"756\" height=\"799\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000042.png 756w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000042-284x300.png 284w\" sizes=\"auto, (max-width: 756px) 100vw, 756px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000140.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-605\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000140.png\" alt=\"\" width=\"1243\" height=\"897\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000140.png 1243w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000140-300x216.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000140-1024x739.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_20230805_000140-768x554.png 768w\" sizes=\"auto, (max-width: 1243px) 100vw, 1243px\" \/><\/a><\/p>\n<p>When you get to partitioning step in the graphical installer, select Manual partitioning.<br \/>\n<a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-571\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_1.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_1.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_1-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_1-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_1-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Select the disk you want to use as your boot drive.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-572\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_2.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_2.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_2-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_2-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_2-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>We are going to use the entire disk for this tutorial, confirm the choice<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-573\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_3.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_3.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_3-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_3-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/06\/step_3-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Now select the free space and click continue. We will create the first partition of size 1 GB for EFI System Partition.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-43.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-576\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-43.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-43.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-43-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-43-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-43-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-53.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-577\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-53.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-53.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-53-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-53-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-39-53-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-04.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-578\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-04.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-04.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-04-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-04-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-04-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-14.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-579\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-14.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-14.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-14-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-14-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-14-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-21.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-580\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-21.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-21.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-21-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-21-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Zaslonska-slika-2023-08-04-22-42-21-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Change \"Use as\" to \"EFI System Partition\".<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230323-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-606\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230323-1.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230323-1.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230323-1-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230323-1-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230323-1-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230358.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-582\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230358.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230358.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230358-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230358-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230358-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Repeat the process by creating second partition for mount point \/boot, use as \"ext4\", size 1GB.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230419.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-583\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230419.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230419.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230419-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230419-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230419-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230508.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-584\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230508.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230508.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230508-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230508-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230508-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230633.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-585\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230633.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230633.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230633-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230633-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230633-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Repeat the process by using the remaining free space for the third partition with usage type \"physical volume for encryption\".<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230736.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-586\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230736.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230736.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230736-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230736-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230736-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Your partitions should now look something like this. Next go up and select option \"Configure encrypted volumes\"<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230807.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-587\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230807.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230807.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230807-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230807-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230807-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230824.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-588\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230824.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230824.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230824-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230824-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230824-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230838.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-589\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230838.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230838.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230838-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230838-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230838-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230857.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-590\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230857.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230857.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230857-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230857-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230857-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230913.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-591\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230913.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230913.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230913-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230913-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230913-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230920.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-592\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230920.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230920.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230920-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230920-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230920-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230929.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-593\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230929.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230929.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230929-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230929-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_230929-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Select a passphrase that will unlock the partition at boot time.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231149.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-594\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231149.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231149.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231149-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231149-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231149-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231206.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-595\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231206.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231206.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231206-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231206-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231206-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>A new encrypted volume entry will appear.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231231.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-596\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231231.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231231.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231231-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231231-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231231-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Select the encrypted volume and configure it as an ext4 partition mounted at \/ (root).<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231316.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-597\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231316.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231316.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231316-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231316-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231316-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231338.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-598\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231338.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231338.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231338-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231338-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231338-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Finish partitioning process.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231353.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-599\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231353.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231353.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231353-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231353-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231353-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>I skipped creating a swap partition for this tutorial, you generally don't need it in this day and age as long as RAM is aplenty.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231416.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-600\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231416.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231416.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231416-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231416-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231416-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a> <a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231426.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-601\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231426.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231426.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231426-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231426-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_231426-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Finally, once you complete the setup process, you will be asked to unlock your disk at boot time.<\/p>\n<p><a href=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_235750.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-602\" src=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_235750.png\" alt=\"\" width=\"1280\" height=\"800\" srcset=\"https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_235750.png 1280w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_235750-300x188.png 300w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_235750-1024x640.png 1024w, https:\/\/xpam.pl\/blog\/wp-content\/uploads\/2024\/07\/Screenshot_linux2022_2023-08-04_235750-768x480.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>Special thanks to this <a href=\"https:\/\/www.reddit.com\/r\/debian\/comments\/146vw37\/guide_install_debian_with_encrypted_root_and\/?utm_source=share&amp;utm_medium=web3x&amp;utm_name=web3xcss&amp;utm_term=1&amp;utm_content=share_button\">reddit post<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<div class=\"wp-post-signature\">\r\n<br \/>\r\n<br \/>\r\n<img src='https:\/\/xpam.pl\/aaaaff.png' title='Moonie' \/> Cen<br \/>\r\n<a href='https:\/\/github.com\/cen1'>GitHub<\/a><br \/>\r\n<a href='https:\/\/eurobattle.net'>Eurobattle.net<\/a><br \/>\r\n<a href='https:\/\/lagabuse.com'>Lagabuse.com<\/a><br \/>\r\n<a href='https:\/\/bnetdocs.org'>Bnetdocs<\/a><br \/>\r\n<\/div>\r\n","protected":false},"excerpt":{"rendered":"<p>If you want to set up encrypted boot drive through Debian Installer you are only given an option to use LVM in the guided process. If you don't want to use LVM the setup is a bit more involved so I am documenting it here. If you want to try this in virt manager, make [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-570","post","type-post","status-publish","format-standard","hentry","category-other"],"_links":{"self":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts\/570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=570"}],"version-history":[{"count":6,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts\/570\/revisions"}],"predecessor-version":[{"id":679,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts\/570\/revisions\/679"}],"wp:attachment":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}