Our great sponsors
-
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
The reasons for wanting /boot to be unencrypted are varied. Maybe you want (much) faster boot time, or maybe you want to use a nice GRUB or Plymouth theme, or you use GRUB in a Multi-Boot scenario where you don't want/need to go through encryption first. Encrypting the /boot partition offers that extra .002% of security by protecting against Evil Maid attacks (https://en.wikipedia.org/wiki/Evil_maid_attack), but comes with several tradeoffs which may not justify using it when it doesn't really apply to 99.998% of peoples' threat model. We can debate this here, but I feel like this has been pretty extensively covered online (e.g. https://github.com/calamares/calamares/issues/1311) so feel free to do a search if you want to learn more. This guide is for people who are aware of the potential security risks, but for whom an Evil Maid attack is not something they need to worry about. Is this you? Cool! Read on...