I wonder if it possible to encrypt an EFI system partition (ESP)?
I would like to set up a virtual machine (VirtualBox) using EFI as boot manager which is supported by the used OS (archlinux). Is there a way to encrypt the boot partition (ESP) using dm-crypt with LUKS? I would like to use systemd's boot loader to run the kernel without the need of something like grub.
Another thing: Does it make sense that the ESP partition should be encrypted due to the fact, that the loaded kernel might be signature checked?