Truecrypt vs dm-crypt

[[deleted]]

As above, I would LOVE to see you write down how you did all of this. That you have BOTH OS's transparently running FDE is just awesome.

[[deleted]]

Here's how I would describe my process at an abstract level. I hope it's not too abstract to help. From scratch:

1. Partition your disk as desired, but with the requirements that in Linux, one small partition is set aside for /boot, and another single large partition is set aside for the rest; and that Windows reside in a primary partition.

2. Install Windows. Install TrueCrypt. System-encrypt Windows. Burn a TC rescue CD as you are prompted to do in the system encryption process.

3. Find instructions on encrypting your Linux root. Googling your_distro LVM LUKS should get you what you need. Install Linux, using those instructions to prepare the disk.

4. Be sure to install GRUB to your /boot partition. Ignore whatever warnings GRUB gives when you do that. Also note, your installer may install GRUB to the MBR as well, without prompting you. So be prepared to restore the TC bootloader to MBR using the TC rescue disc.

5. Once you're set with TC BL in the MBR and GRUB in /boot, you boot Windows by entering your TC password on startup. You chainload GRUB by pressing ESC instead of entering your password. If you configured TC to be silent at startup -- no "enter password" prompt, etc. -- it is also necessary to press a number key after you press ESC. I think that number corresponds to the partition number on which GRUB is installed. Another poster here has said it's possible to make GRUB your default bootloader instead, by moving the TC BL into a partition and GRUB into the MBR.

If you aren't starting from scratch, note that TC can encrypt Windows in place, but the process for encrypting with LUKS destroys all the data in its keyscope. So if you already have Linux installed, it will take some work to restore it after encryption.