kdyz uz teda jsme u toho, tak ti odpovim neprimo

asi nejlepsi je mit zakryptovanej celej disk a na tom posazene LVM .. tzn mas nejakej 200MB boot (dev/sda1), a potom LVM sedi na zakryptovanem /dev/sda2 (nebo dev/sda5 v pripade, ze to nemas primary ale logical)
30GB na root je zbytecne moc, mit rozdelene /home a /data mi take pripada zbytecne .. 1GB na /boot je take moc .. jedine, co pro tebe mohu udelat je, ukazat Ti jak to mam ja:
# fdisk -l /dev/sda
Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk label type: dos
Disk identifier: 0x000e7324
Device Boot Start End Blocks Id System
/dev/sda1 * 2048 610303 304128 83 Linux
/dev/sda2 610304 976773119 488081408 f W95 Ext'd (LBA)
/dev/sda5 612352 976752639 488070144 8e Linux LVM
# blkid
/dev/sda1: UUID="0a79d253-aded-4410-83f9-60cd4d52f8eb" TYPE="ext4" PTTYPE="dos"
/dev/sda5: UUID="10bf770a-0fce-453b-a5e9-a7e6dbcd7a4a" TYPE="crypto_LUKS"
/dev/mapper/cr_ata-ST9500423AS_W2V00YP9-part5: UUID="aRdyQm-l1Oe-Hc2c-TL0g-voPp-nNQh-DAE6vx" TYPE="LVM2_member"
/dev/mapper/rpool-home: UUID="0273d1c5-fb80-4b11-a668-3025f4371405" TYPE="ext4"
/dev/mapper/rpool-root: UUID="a8e72779-a120-4f2f-a175-6be1689173ce" TYPE="ext4"
/dev/mapper/rpool-swap: UUID="a7fd6f21-7268-4d44-93b3-3062caadec4a" TYPE="swap
# lvdisplay 2>/dev/null
--- Logical volume ---
LV Path /dev/rpool/home
LV Name home
VG Name rpool
LV UUID oVmz2H-xhY4-UIL3-aa3h-sNk5-74bG-Y9TDuK
LV Write Access read/write
LV Creation host, time guest218.guest.i.cz, 2014-01-03 16:36:39 +0100
LV Status available
# open 1
LV Size 437.45 GiB
Current LE 111988
Segments 1
Allocation inherit
Read ahead sectors auto
- currently set to 256
Block device 253:1
--- Logical volume ---
LV Path /dev/rpool/root
LV Name root
VG Name rpool
LV UUID R1WdvZ-s8fe-L03d-MBoO-k548-NF6z-Xsk1FY
LV Write Access read/write
LV Creation host, time guest218.guest.i.cz, 2014-01-03 16:36:39 +0100
LV Status available
# open 1
LV Size 20.00 GiB
Current LE 5120
Segments 1
Allocation inherit
Read ahead sectors auto
- currently set to 256
Block device 253:2
--- Logical volume ---
LV Path /dev/rpool/swap
LV Name swap
VG Name rpool
LV UUID ED17Eb-o5b6-SiDf-BF6b-Zw8p-Zwia-2e3xvN
LV Write Access read/write
LV Creation host, time guest218.guest.i.cz, 2014-01-03 16:36:39 +0100
LV Status available
# open 2
LV Size 8.00 GiB
Current LE 2048
Segments 1
Allocation inherit
Read ahead sectors auto
- currently set to 256
Block device 253:3v pripade, ze na tech /data trvas, tak bych to asi v tom lvmku hodil na soft volume, tedy bude to rust on-demand