I have a fresh installation of Kubuntu 20.10.
In the installer, I chose the option for full-disk encryption. The partition holding my system (the one mounted at /) is now encrypted.
But /boot is still un-encrypted. This exposes me to evil maid attacks.
The most updated how-to guide for full disk encryption in Ubuntu (including /boot) I have found dates back to 2019, would have me to reinstall everything from scratch.
I already have the system partition encrypted, now I only need to encrypt /boot.
Is there a way to encrypt the /boot partition without having to reinstall everything?
0 Answers