Instructions
1. Create an EFI(for EFI users) bootable Kali 1.08 install thumb drive. Follow the instructions on the Kali website (download iso and use dd to image it onto a usb drive)
2. Boot from the thumb drive (in EFI mode as required) and select the 'Install' option from the menu. Do not enter live mode as I've read a bug exists which won't allow the system to boot after install. I haven't tested it myself.
3. Install as usual until you reach the 'Partition Disks' screen. On this screen select 'Manual' as the partitioning method
Below is similar to what I see on this screen. I have one hard drive in my laptop with Windows 8.1 installed at the start of the drive
SCSI2 (0,0,0) (sda) - 256 GB ATA Sandisk
1.0 MB FREE SPACE
#1 629 MB B K EFI Boot EFI Systems Information
512 B FREE SPACE
#2 160GB NTFS Windows Partition
903KB FREE SPACE
#3 91GB EXT4 /
#4 4GB SWAP Linux Swap
What we need to do is remove our old Kali Linux so we have the free space at the end of the drive for our encrypted volume.
1. Select the EXT4 partition for / and then choose delete this partition
2. Select the SWAP partition for Linux Swap and choose delete this partition
3. You should now have something similar to that below
SCSI2 (0,0,0) (sda) - 256 GB ATA Sandisk
1.0 MB FREE SPACE
#1 629 MB B K EFI Boot EFI Systems Information
512 B FREE SPACE
#2 160GB NTFS Windows Partition
95GB FREE SPACE
Creating the /boot partition
1. Select the 95GB of free space and press return
2. Create new partition
3. Enter 256MB as the partition size
4. Select Beginning at the start of the partition
5. On the new screen, select 'Use As' and then choose EXT2
6. Select 'Mount Point' and then choose '/boot'
7. Select 'Done setting up the partition'
Creating the Encrypted Volume
The encrypted volume will take up the remainder of the free space
1. At the top of the 'Partition Disks' main screen, select 'Configure encrypted volumes'
2. Select yes to write changes to disk
3. Select 'Create encrypted volume'
4. Select the remaining free space on the drive. For me, it read:
Code:
/dev/sda FREE #4
and had 94743MB available which is the 95GB starting size - /boot
5. Select 'Done setting up the partition
6. Write changes to disk
7. Select 'Finish'
8. Select 'Yes' to erase the partition
Note
This erase will take a long time. You can select cancel and proceed immediately but it will not blank out your drive with random data. I guess it depends on how large a tin foil hat you wear. Don't be surprised if it takes 6 hours.
9. Once the erase is finished, set the boot time pass-phrase. You will need to enter this pass-phrase each time you boot. It is separate from your root password.
Creating a Volume Group
1. From the main Partition Disk screen, select 'Configure the Logical Volume Manager'
2. Confirm the write changes to disk
3. Select 'Create Volume Group'
4. Name the volume group 'Kali'
5. Select the encrypted volume which was created previously. It should read similar to:
Code:
/dev/mapper/sda4_crypt
and can be recognised by the partition size of our 95GB - /boot
6. Select 'Yes' to configure LVM