I've seen questions like this asked a lot, but I haven't found the answers very helpful, either because they don't do quite what I want, suggest something that seems unsatisfactory, or gloss over steps and go over my head.
What I want:
- Linux Mint 19 (nothing else—no dual boot or anything)
- Full disk encryption (because I understand that the home drive encryption option comes with a performance penalty)
-
/home
in its own partition, on a separate drive from/
and everything else - Reliability—I don't want to stray further from the happy path than necessary, because I've had Mint systems break on OS updates when they've been too customised
- nice to have: a swap partition
/boot
, /home
, swap, etc. Sometimes it comes with repercussions, e.g. hibernating not working, or GRUB completely freaking out when I do a system update and everything getting messed up. But I'm not a complete n00b at this—I even have an old laptop with Mint 17, installed the way I want. When I boot that machine, it asks me for the encryption passwords for the two drives; this is basically what I want on my new laptop, with Mint 19. (Hibernation doesn't work on my old laptop, which is frustrating, but close enough.)And yet, I've made numerous attempts to install Mint 19 on my shiny new laptop, with two 1TB SDD drives and a third 1TB spinning metal drive, and it never quite works out. It either won't boot, or only one drive is encrypted, or everything just ends up on one of the drives.
I'm actually okay with starting with a stock-standard one-drive FDE installation, as long as I can move my
/home
directory to a separate, fully encrypted drive. But I haven't had any success with that, either; I think I got LUKS to work at one point, but it didn't prompt me for the password when I booted, and the system couldn't find my home directory on time.So can anybody point to detailed instructions for what I want, for a configuration will play nicely across updates? I guess it boils down to, how can I do 'something else', but maintain FDE on all drives?
Thanks,
MikZ.