Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

In order to protect a fully encrypted system I want to put the boot partition on a CD-ROM, so it cannot be altered. In my scenario an USB stick is too insecure and not possible. I read that I might get problems with kernel upgrades. How serious is that problem? Would there be another kernel on the fully encrypted system, too? Would the kernel on the CD-ROM just be used for booting? I'm new to linux.

share|improve this question
1  
I can see no advantages to this type of setup. If the system is truly fully encrypted, having a "static" boot partition isn't going to change anything. –  KronoS Aug 28 '13 at 20:29
    
It is hard to explain, but it does make a difference. I just wonder about possible upgrade problems. What kind of problem will I be facing and are there 2 kernels as I suggested? –  user249379 Aug 28 '13 at 20:43
1  
Perhaps you could lay out your reasons for believing that a static partition would help you? I see no security boost in using this approach either. –  David Aug 28 '13 at 20:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.