4. Final steps

Modify /etc/fstab so that it contains:

/dev/loop0 / ext3 defaults 0 1

Remove /etc/mtab and exit from chroot. Finally, run "umount -d /mnt/efs" and reboot. hda3 is not needed anymore, so you can create an encrypted filesystem on this partition and use it as a backup.

Now, if you're low on RAM you'll need some swap space. Let's suppose hda4 will hold your encrypted swap partition; you must create the swap device first:

shred -n 1 -v /dev/hda4 losetup -e aes256 /dev/loop1 /dev/hda4 mkswap /dev/loop1

Then create a script (S00swap) in the system startup directory (/etc/rcS.d/ under Debian):

#!/bin/sh echo "password chosen above" | \ losetup -p 0 -e aes256 /dev/loop1 /dev/hda4 swapon /dev/loop1