"tor" is not a system package on my system. I would install it in /home/not-tor and I switch to the not-tor user when I wanted to use tor, if I did, which I don't.
I do not think "system packages" are usefully secret and there are many downsides to treating them as such, so I am satisfied just verifying they have not been tampered with, but you can encrypt other disk slices too if you feel super strongly about this.
> The device is stolen or lost and its contents must remain secret.
Seems this page uses a weak notion of "secret contents", since it doesn't encrypt the system packages, only user data and some configuration files.
Maybe I don't want anybody to know I have installed Tor on my system, in some countries this is illegal.
"tor" is not a system package on my system. I would install it in /home/not-tor and I switch to the not-tor user when I wanted to use tor, if I did, which I don't.
I do not think "system packages" are usefully secret and there are many downsides to treating them as such, so I am satisfied just verifying they have not been tampered with, but you can encrypt other disk slices too if you feel super strongly about this.
Then install it in $HOME ?