On Sat, 16 Jan 2010, Matt wrote:
> I was interested in encrypting my dual boot laptop at the partition/disk 
> level. I first tried Truecrypt but quickly found out it doesn't do this for 
> the Linux root partition. LUKS seemed like the only reasonable Linux 
> partition encryption solution, but again, it doesn't seem to address the root 
> partition.
>
> I ended up using Truecrypt to encrypt the Windows partition with pre-boot 
> authentication. To boot to Linux, I bypass the Truecrypt bootloader to GRUB 
> which boots Linux. Then I use a Truecrypt volume file in Linux.
>
> Is there a better solution?
The "traditional" solution is to have an unencrypted boot volume for kernel, initramfs,
grub, etc. Root will work fine on LUKS if your initramfs supports it. It's possible grub
will support LUKS at some point but for now you just need /boot unencrypted.

-- 
Edward Allcutt