This documents how to set up an encrypted root filesystem (except for /boot) on Debian Wheezy with automatic mounting using a keyfile on a USB drive.
In the Debian Installer, choose "Guided - use entire disk and set up encrypted LVM". That's it, on boot you will be asked to enter you passphrase using the keyboard. My system does not usually have a keyboard attached, so that's not very convenient (but read on).
| !------------------------------------------------------------------------------- | |
| ! Xft settings | |
| !------------------------------------------------------------------------------- | |
| Xft.dpi: 96 | |
| Xft.antialias: false | |
| Xft.rgba: rgb | |
| Xft.hinting: true | |
| Xft.hintstyle: hintslight |
| urxvt.perl-ext-common: default,tabbed,matcher,searchable-scrollback | |
| urxvt*cutchars: "()*,<>[]{}|' | |
| urxvt*termName: rxvt-unicode | |
| urxvt*urlLauncher: iceweasel | |
| urxvt*matcher.button: 1 | |
| urxvt*keysym.S-Prior: ^[[5;2~ | |
| urxvt*keysym.S-Next: ^[[6;2~ | |
| urxvt*geometry: 100x30 | |
| urxvt*highlightSelection: true |