From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <mbroz@redhat.com>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 8HeMdIiJlpaF for <dm-crypt@saout.de>;
 Thu, 10 Nov 2011 12:00:41 +0100 (CET)
Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28])
 by mail.saout.de (Postfix) with ESMTP
 for <dm-crypt@saout.de>; Thu, 10 Nov 2011 12:00:40 +0100 (CET)
Received: from int-mx02.intmail.prod.int.phx2.redhat.com
 (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12])
 by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id pAAB0dbe029206
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK)
 for <dm-crypt@saout.de>; Thu, 10 Nov 2011 06:00:39 -0500
Received: from [10.34.30.35] (tawny.brq.redhat.com [10.34.30.35])
 by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id
 pAAB0bu8018746
 for <dm-crypt@saout.de>; Thu, 10 Nov 2011 06:00:38 -0500
Message-ID: <4EBBAED4.1060308@redhat.com>
Date: Thu, 10 Nov 2011 12:00:36 +0100
From: Milan Broz <mbroz@redhat.com>
MIME-Version: 1.0
References: <CAPTy4so2YLyLanwoBQdvZZdoh+FvNsZNM0LzBaxvKWz+YHv0Uw@mail.gmail.com>
 <20111109203445.GA4797@tansi.org>
 <CAPTy4spQvVrM0N2NVDUZT6ahmf-S-wXcUw-etDbBK_d1XTHwJQ@mail.gmail.com>
 <20111110103027.GA16231@tansi.org>
In-Reply-To: <20111110103027.GA16231@tansi.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] LiveUSB encrypted.
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On 11/10/2011 11:30 AM, Arno Wagner wrote:
> I actually do not know in detail. Basically you need a 
> bootloader to load kernel and initrd, and the initrd then needs 
> to decrypt the encrypted root partition and mount it as such.

grub2 boor loader should be able to decrypt full LUKS mapping without initramfs.

Milan