I have decided it is time for me to get paranoid again and encrypt my system. I have two internal hard drives and I would like to set it up to where I only have to type in one password at boot to authenticate myself and both drives would automatically be mounted. I know how to set up multiple partitions on the same drive to be encrypted using lvm, but am not sure how to do what I want. Also, I want to get even more paranoid and install /boot on a usb drive so that both of my hard drives are encrypted completely. I've never tried that before, is it as simple as just setting the mount point for /boot as a usb key during install? And that would potentially kill the possibility of the Evil Maid Attack, correct?