Hello, you may know that linux root password can be resetted (example from rescue mode), so this means linux server offers no protection against access of data when you get somehow remote or physical access to server?
So my question is how i can full encrypt linux webserver disk so no one can read disk data even he got physical access to the server? the best way, links? thank you
Choose disk encryption or LvM2 Encrypted from the set-up menu when you install it! So no matter if they steal your disks, without your password they're screwed.
You can of course also remove the rescue option from the boot menu and also password protect the Bootloader as well.
But of course you can then make it double difficult, select LUKS or GnuPG and use it on your documents as well, just to be that extra bit "Obstinate!" Privacy is a Right, not a feature!