[The Jackal]

erm that doesn't make sense....

If you're booting an encryted fs at boot you're essentially making it visible without a password. All you'll need is the root password or worse still boot into single user mode.

If I were doing this..

/ unencrypted for speed

/data encryted. After you boot up you'll need a password and ssh key to mount it. For extra security I would put my key on a usb stick