Full disk encryption of Ubuntu for certain partitions at install time

[Xen]

Sreyan Chakravarty schreef op 07-08-2017 19:14:

> Just tell me something I place grubx64.efi on my EFI System Partition 
> and I keep all my grub configuration files in the /boot directory right 
> ?

I have no experience with UEFI.

Normally your initrd is encrypted because it is in the /boot directory 
that is on an encrypted volume that GRUB can unlock for no other reason 
than reading the kernel, initrd, and grub boot files.

This implies that GRUB itself is accessible in the MBR/Bios boot 
partition.

The only change you make with UEFI I suppose is that GRUB is now no 
longer located at the start of the disk, but in your EFI System 
Partition.

If there are no other changes, then the rest of the setup remains the 
same.

Regards.