Qubes OS Installation - BTRFS w/ Detached encrypted boot and header

[jodobear]

But, doing the following wouldn’t create an encrypted /boot, right? For that i’d have to follow your guide, right?

@51lieal

delete all partition, then change lvm thin provisioning to btrfs and “click here to create them automatically” and you done.

If i use the BTRFS parts from this guide and the EFI ones from Qubes OS Installation - Detached encrypted boot and header, that should work?

Could you kindly point me to where can i learn/read more about this?

@51lieal

it’s not erasing root partition but erasing all keyslots and make the LUKS container permanently inaccessible.

then

wipefs can erase filesystem, raid or partition table signatures (magic\ strings) from the specified device to make the signature invisible for\ libblkid

i did this because we doing detachable header. so the partition is remain unknown.

Thank you!