Hello!
Great efforts, I do that to.
I have some tips:
1. You could use GPT instead of MBR; an advantage is that you don't need
extended partitions, another is the CRC32 integrity-check mechanism; see:
· https://duckduckgo.com/GUID_Partition_Table
· https://wiki.archlinux.org/index.php/GUID_Partition_Table
Trisquel has gdisk and GRUB 2 in its repos.
2. You could use a separate /srv partition too. For more on partitioning
schemes, I recommend this:
· https://duckduckgo.com/Filesystem_Hierarchy_Standard
· https://wiki.archlinux.org/index.php/Partitioning
3. For security:
· https://wiki.archlinux.org/index.php/Security
Because I had no time to setup it the best way, I do not encrypt my
workstation partitions -- only those in my notebook (all-in-one LVM
encrypted). Here is a sample of my workstation's good-to-Trisquel (I have to
uninstall old kernel packages as soon as I upgrade linux-libre... ;P I
migrated from Parabola to Trisquel and didn't foresee this!) /etc/fstab:
#
tmpfs /tmp tmpfs nodev,nosuid
0 0
#906 GiB
LABEL=home /home ext4 defaults,relatime,nodev,nosuid
0 2
#60 MiB
LABEL=t_boot /boot ext2
defaults,relatime,nodev,noexec,nosuid 0 2
#378 MiB
LABEL=trisquel / ext4 errors=remount-ro,relatime
0 1
#6,9 GiB
LABEL=t_usr /usr ext4 defaults,relatime,nodev
0 2
#1,0 GiB
LABEL=t_var /var reiserfs defaults,nodev,nosuid
0 2
#504 MiB
LABEL=t_opt /opt ext4 defaults,relatime,nodev,nosuid
0 2
#504 MiB
LABEL=srv /srv ext4
defaults,relatime,nodev,noexec,nosuid 0 2
#2,0 GiB (same space as in my RAM memory)
LABEL=swap none swap sw
0 0
My bests!
