I have tried the instruction

init=/bin/sh

but the system does not boot.
Anyway, I think this is not very useful, since the file system on the USB stick is in format
squashfs (a read-only compressed file system). It is impossible to modify it without rebuilding it.

I think the only one solution is "netinst" image. It would be interesting however
if the "minimal-live" image had the possibility to boot over serial line.

In order to have only one encrypted partition, one has to work with the "netinst" image
and do the job manually. It is doubtful if this is really interesting since typing
the passphrase at each boot is certainly not usable. Perhaps by using
a special GPG key to unlock the partition, full disk encryption is practical.

The interest to have a such solution is that, if the disk is broken, it can be replaced
without worrying about to erase it (which is often impossible if the disk is broken).

Contrary to what is suggested in a previous post, the Debian installation manual
is not very helpful. It states explicitely that it is impossible to have
"/boot" and the rest of the system on a single encrypted partition.

Hello,

Thanks for the tip. I have googled but with "Devuan" instead of "Debian". Soon
after my post, I have found this page https://teklager.se/en/knowledge-base/i … apu-board/
which was helpful. I have forgotten how Devuan is near (at least on some features)
of the Debian distribution.

Unfortunately, by using the netinst image it is not possible to have the
directory "/boot" and the rest of the system on the same encrypted partition.
At least not automatically.

I would appreciate some pointers on how to do that manually (the installer provided
with the "desktop-live" image permit to have only one encrypted partition
but without giving indications on how this is achieved).

Is it possible to have only one encrypted partition with the image "minimal-live"?
I haven't yet tried it and I don't know if it is possible to add the required instructions
to the grub entry and if it allows only one encrypted partition.

Thanks for your help,

Best regards,

Nemo76

Hi,
    Thanks for the tip. the packages "grub-efi-amd64" and "grub-efi-amd64-signed" were installed. After the
following manipulations, the system boots again:
                1) apt remove --purge grub-efi-amd64-signed
                2) rm -rf /boot/efi/EFI/devuan
                3) grub-install /dev/sda

By the way, I have used the ISO Super Grub Disk (https://www.supergrubdisk.org) to boot more easily
my system. With this ISO, it was possible to unlock the encrypted disk and then
to find the file "grub.cfg" inside the crypted file system without having
to type the very long UUID (which should be first copied on a sheet of paper
with a pen).

Thanks for your help.

Best regards.