I basically did as follows during installation:
1. Delete all partitions on disk
2. Create 200 M primary partition, for /boot
3. Create logical partition with the rest of space on the disk, with option
"use as physical area for encryption" (or whatever the option is)
4. Select "configure encrypted partitions", and select the logical volume,
which is usually /dev/sda5. The installer then formats the data in the
encrypted partition
5. Select " configure the logical volume manager".
6. Create a volume group, called whatever you want ("herd-of-cats"?)
7. Make a logical volume, in the new volume group, for /root, make the rest
for /home. If you are using an SSD like myself don't make a swap partition as
it reduces the life of the SSD significantly, and ignore the warning of the
installer about lack of swap space. Else just make a logical volume for swap
as well.
8. Boot the system.
9. Remove /boot from fstab and unmount it. Then remount the partition
somewhere other than /boot (/mnt?) and move its files to /boot, which still
exists on /.
9. Add "GRUB_ENABLE_CRYPTDISK=y" to /etc default/grub, run "grub-mkconfig -o
/boot/grub/grub.cfg", and finally "grub-install" on your disk.
10. Delete /boot or whatever. Voila!
What I have done is the equivalent of a guided install with encrypted LVM,
then configuring GRUB to work without an unencrypted /boot partition.
Note, this may look like an extremely convoluted process. It would be far
simpler just to not make /boot at all. In fact, perhaps the installer would
configure GRUB to have the "GRUB_ENABLE_CRYPTSISK" option already set if you
don't make an unencrypted /boot partition. I'll have to investigate.
Also, if you selected "continue without the bootloader" (did it try to
install GRUB to the installation media? If so, try a CD as opposed to USB, or
remove the USB temporarily and then select the target dusk for the
bootloader) then you will have no GRUB. Using what I have done (basically
doing a guided install with encrypted LVM) is simpler than having to install
GRUB with a live CD.
I'm quite certain it will work in Debian stable too, if it uses GRUB v2.
