From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-140956-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id E409D138010
	for <garchives@archives.gentoo.org>; Tue,  4 Sep 2012 13:50:57 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id D3C53E02C4;
	Tue,  4 Sep 2012 13:50:32 +0000 (UTC)
Received: from mout.web.de (mout.web.de [212.227.17.12])
	by pigeon.gentoo.org (Postfix) with ESMTP id D6C0AE011E
	for <gentoo-user@lists.gentoo.org>; Tue,  4 Sep 2012 13:48:28 +0000 (UTC)
Received: from 3capp-webde-bs10.server.lan ([172.19.170.10]) by
 mriweb.server.lan (mriweb001) with ESMTPA (Nemesis) id
 0M3OL0-1TQhOF3qbI-00r8Ql for <gentoo-user@lists.gentoo.org>; Tue, 04 Sep 2012
 15:48:27 +0200
Received: from [94.221.159.125] by 3capp-webde-bs10.server.lan with HTTP;
 Tue Sep 04 15:48:27 CEST 2012
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
Message-ID: <trinity-f97ea7f1-e1b2-440e-b75e-8c9ca0bb0f6c-1346766507789@3capp-webde-bs10>
From: =?UTF-8?Q?=22Roland_H=C3=A4der=22?= <r.haeder@web.de>
To: gentoo-user@lists.gentoo.org
Subject: Aw: Re: [gentoo-user] dm-crypt + ext4 = where will the journal go?
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Date: Tue, 4 Sep 2012 15:48:27 +0200 (CEST)
In-Reply-To: <trinity-8e19d4ef-013d-477c-b7d0-00b1ccde2379-1346710378063@3capp-webde-bs10>
References: <trinity-d4c8875e-6af1-4873-9151-83c82e7599a8-1346703623543@3capp-webde-bs27>
 <trinity-aebe8c59-aa7a-40ec-b60b-ae9e5d9f11e7-1346704595742@3capp-webde-bs27>,
 <504518A3.7000207@binarywings.net>,
 <trinity-f7c5ffa7-f823-43b1-bfbf-b4a799518634-1346707396655@3capp-webde-bs10>,
 <trinity-8e19d4ef-013d-477c-b7d0-00b1ccde2379-1346710378063@3capp-webde-bs10>
Importance: normal
Sensitivity: Normal
X-UI-Message-Type: mail
X-Priority: 3
X-Provags-ID: V01U2FsdGVkX18bJK8nKQ9EuVmpCTKUz+fj/+TuoajUuHbbt9PPjmUBP8wUsLEaF7eP
 VdhElsGVDMJKN5R1j8L/jY2+ulVwfLtHIzl4Nx2PT8ACtl+N50ZmkQ==
X-Archives-Salt: 53c09056-81ca-4d2d-85cc-22c5ba0befc7
X-Archives-Hash: c991af83a663a7ca58da123693b0457e

I think I made a (tollerateable) mistake:

My hard drive has two partitions:
- sda1 - encrypted swap
- sda2 - encrypted root

How should it boot? One way could be by external media (e.g. stick), other is from hard drive. But that is encrypted. So I must leave a small area left for kernel, initrd, System.map and maybe config.

So the page at [1] is a little wrong because it misses the boot partition, so the new layout should be:
- sda1 - unencrypted boot (/boot) partition
- sda2 - encrypted swap (at least as double as your RAM) (crypt-swap)
- sda3 - encrypted root (crypt-root)

Can someone update this?

Regards,
Roland

[1]: http://wiki.gentoo.org/wiki/DM-Crypt