Full disk encryption without root partition

[mhca12]

On Fri, Dec 28, 2012 at 9:33 AM, C-S <c-s at c-s.li> wrote:
>
>> Date: Wed, 26 Dec 2012 22:18:40 +0100
>> From: mhca12 <mhca12 at gmail.com>
>> To: freebsd-questions at freebsd.org
>> Subject: Re: Full disk encryption without root partition
>> Message-ID:
>>       <CAHUOmant1m446mVY85R7EpBd2Pw14gdL03fpmVPMKsrr_epfPw at mail.gmail.com>
>> Content-Type: text/plain; charset=ISO-8859-1
>>
>> On Wed, Dec 26, 2012 at 10:17 PM, mhca12 <mhca12 at gmail.com> wrote:
>>> Are there any plans or is there already support for full
>>> disk encryption without the need for a root partition?
>>
>> I am sorry, I certainly meant to write "boot partition".
>>
>
>
> Yes, it is possible to use GELI for example to do a full disk encryption
> and have the boot partition on a USB stick.

That would still keep the boot partition as unencrypted, wouldn't it?