Place the root filesystem on encrypted LVM.
Ensure the bootloader can reach the kernel and initramfs before the complex root environment is available.
Which design is generally useful?
A separate /boot in a bootloader-readable area keeps the kernel and initramfs outside the encrypted or complex root volume when required by the platform.
Detailed explanation
Incorrect. A separate /var helps variable data capacity but does not directly make boot files reachable.
Incorrect. A separate /var helps variable data capacity but does not directly make boot files reachable.
Correct. A readable /boot can hold initial boot files outside the encrypted root.
Correct. A readable /boot can hold initial boot files outside the encrypted root.
Incorrect. A separate /home isolates user data rather than boot files.
Incorrect. A separate /home isolates user data rather than boot files.
Incorrect. Swap cannot substitute for an ESP or /boot.
Incorrect. Swap cannot substitute for an ESP or /boot.
Try it yourself
An example you can run in a temporary verification environment.
findmnt -no TARGET,SOURCE,FSTYPE /boot 2>/dev/null || printf '%s
' '/boot may be part of /'Expected result
現在環境の/bootの配置。独立パーティションは必須ではないKey points
- /boot contains kernel and initramfs
- Early boot needs readable files
- Whether separation is needed depends on the platform
Notes
- Environment: Linuxのブート構成 / 読み取り確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.