Pre-Installation

My machine is configured (during installation) to have Secure Boot disabled. After completing the installation, I will re-enable Secure Boot in the Secure Boot section of this guide.

Important
If you already have an EFI partition on your machine and don’t want to use it for the EFI of your Debian installation, you’ll either need to detach the disk that contains the EFI partition or fix the EFI partition mapping in /etc/fstab after installation completes. For the latter, you can follow these instructions.

Installation

I have manually set my disks up during installation as:

Partition TypeSizeMount PointFile System
EFI System512M*/boot/efiEFI System/FAT 32
Boot512M*/bootFAT32
LUKS-encrypted LVM100%/ext4

*: These are recommended sizes. I’ve gotten away with the EFI and boot partitions set to 300 MB, but you’ll have to do a bit of clean up earlier on in the process.