<p>Well the way that I would do it is have /boot on its own ext2 partition, unencrypted, and then everything else in encrypted partitions. As far as securely providing the key, it has to be given at the console by a human, or some other means needs to be made available. Maybe an exchange over the LAN or something, where it couldn't work on another network. It'd depend on real security requirements.</p>
<p>--<br>
Sent from my G2.</p>
<div class="gmail_quote">On Oct 13, 2010 4:33 PM, "Jim Butler" <<a href="mailto:jimbutler1234567890@gmail.com">jimbutler1234567890@gmail.com</a>> wrote:<br type="attribution"></div>