I have a question regarding the safest method to encrypt a file and/or a LAMP server using Ubuntu 14.04.
When manually partitioning the disk, I chose the following:
/boot - 256 MB / - 51.4 GB (sda2_crypt) swap - 2 GB (sda3_crypt)
The system boots and prompts me for my encryption password for both the root (/) and swap partitions.
My question is:
How secure is this system if I were to lose control of root partition (ie - someone steals this server)? I realize the boot loader is NOT encrypted - will someone realistically be able to retrieve the data on the root filesystem?
The scenario is that there is a lot of sensitive data I wish to keep encrypted using Ubuntu's built-in encryption. And if someone were to steal it, I am hoping the data would remain safe.
CAVEAT: I realize that with enough time, and physical access to any system, someone could retrieve data from the system. My question, is this a "safe" setup based on the fact that the /boot partition is NOT encrypted, and, without a significant effort to decrypt, is the data still safe?