[Eleutherios]

Hey. I want to make a LiveCD (well, DVD), and was wondering if there was a way to have full disk encryption on the LiveCD. That is, the CD's contents are encrypted, and upon boot, you must enter a password to decrypt. The method should use AES. Anyone know of a way to do this?

[RobLinux]

Guess so, if you alter the kernel code that decompresses the rest of the kernel, and the RAM disk then almost all of the CD could be encrypted.

If "full disk encryption" means you're not needing the kernel encrypted then you'll find that init= gives you a way of booting something different from /sbin/init. So at that point you could probably mount an encrypted container file filesystem on the CD with a loopback mount. Installation CD's load a busybox based memory minimal Linux, and then start something up so a similar approach should work.

Be easier just to take a stripped down lite Linux (or put something like Knoppix on a diet), and add in the container file and crypto support for it (if it's not present) than do "full disk encryption" though.