Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In order to protect a fully encrypted system I want to put the boot partition on a CD-ROM, so it cannot be altered. In my scenario an USB stick is too insecure and not possible. I read that I might get problems with kernel upgrades. How serious is that problem? Would there be another kernel on the fully encrypted system, too? Would the kernel on the CD-ROM just be used for booting? I'm new to linux.

share|improve this question
I can see no advantages to this type of setup. If the system is truly fully encrypted, having a "static" boot partition isn't going to change anything. – KronoS Aug 28 '13 at 20:29
It is hard to explain, but it does make a difference. I just wonder about possible upgrade problems. What kind of problem will I be facing and are there 2 kernels as I suggested? – user249379 Aug 28 '13 at 20:43
Perhaps you could lay out your reasons for believing that a static partition would help you? I see no security boost in using this approach either. – David Aug 28 '13 at 20:55

You must log in to answer this question.

Browse other questions tagged .