- Prepare a partition for
/boot/efiand a partition for/bootingparted
|------+-------------+-----------+------+-------+-----------|
| Name | Mount point | Flag | Size | FS | Comment |
|------+-------------+-----------+------+-------+-----------|
| sda1 | /boot/efi | esp, boot | 300M | FAT32 | |
| sda2 | /boot | | 2G | EXT4 | |
| sda3 | | | | EXT4 | Encrypted |
| sda4 | | | | EXT4 | Clear |
|------+-------------+-----------+------+-------+-----------|
- Install clear GNU/Linux on
sda4At manual partitioning step- Select
sda1- Format FAT32
- Flag esp boot
- Mount
/boot/efi
- Select
sda4- Format EXT4
- Mount
/
- Select
- Install crypted GNU/Linux on
sda3At manual partitioning step, check encrypt- Select
sda1- Mount
/boot/efi
- Mount
- Select
sda2- Format EXT4
- Mount
/boot
- Select
sda3- Delete partition
- Create partition
- Check crypt and enter passphrase
- Mount
/
- Select
- Edit grub
- From crypted GNU/Linux do
sudo gedit /etc/default/grub - Enable os-prober by uncommenting
#GRUB_DISABLE_OS_PROBERfalse` - Do
- From crypted GNU/Linux do
sudo grub-mkconfig -o /boot/grub/grub.cfg
reboot
Notes
To have the passphrase asked after kernel selection,
- encrypted GNU/Linux kernels have to be stored on a specific
/boot/efipartition (sda2) - clear GNU/Linux kernels have to be stored in the same partition as clear GNU/Linux (
sda4)