Place the root filesystem on encrypted LVM.
Ensure the bootloader can reach the kernel and initramfs before the complex root environment is available.
Which design is generally useful?
A separate /boot in a bootloader-readable area keeps the kernel and initramfs outside the encrypted or complex root volume when required by the platform.
Detailed explanation
Incorrect. A separate /var helps variable data capacity but does not directly make boot files reachable.
Correct. A readable /boot can hold initial boot files outside the encrypted root.
Incorrect. A separate /home isolates user data rather than boot files.
Incorrect. Swap cannot substitute for an ESP or /boot.
Try it yourself
An example you can run in a temporary verification environment.
findmnt -no TARGET,SOURCE,FSTYPE /boot 2>/dev/null || printf '%s
' '/boot may be part of /'Expected result
現在環境の/bootの配置。独立パーティションは必須ではないKey points
- /boot contains kernel and initramfs
- Early boot needs readable files
- Whether separation is needed depends on the platform
Notes
- Environment: Linuxのブート構成 / 読み取り確認
- Use read-only inspection or a disposable disk when learning storage commands.
- Partition and LVM writes can destroy data; verify the target before running them.
Foundation review
Place the operation
Boot files and user data have different availability requirements during startup.
Check the side effect
Test the boot path after changing encryption, LVM, or bootloader layout.