LUKS
Since we understand the basics of partitioning schemes, let's spend some time understanding encryption schemes that are available in Linux.
Note
Remember that if we encrypt a partition that contains files that are needed to boot the system, such as kernel, then the system will become unbootable. Try it yourself!
In order to have a full disk-like encryption, we need to have /boot
in a separate partition and then encrypt the data of other partitions. This is illustrated in the following diagram:

Introduction to LUKS
LUKS stands for Linux Unified Key Setup-on-disk-format, and it allows us to encrypt partitions on Linux systems. This is particularly important in laptops that might have some critical data.
Let's take a use case and we will dedicate this section to solving it.
John is a security engineer at the Little Corp organization. They have one critical production server that contains sensitive data. The sensitive data size is typically 10 GB, and the requirement is that it must be a part...