On Thu, May 25, 2017 at 12:28 PM, J. Roeleveld <jo...@antarean.org> wrote: > > Not sure how long ago this was. I'm planning on redoing the whole laptop in > the near future anyway. > > If anyone knows of a better way (that works without TPM) I would like to hear > about it. >
I'd read up on LUKS. That seems to be the way everybody is doing stuff like this today. It probably isn't much different in security but it is more standard, which means more convenience when booting from rescue disks and so on. I bet with something like dracut you can probably configure it more easily as well. However, I've not looked into the details. -- Rich