Arch Linux

jnhieber

Member

From: Germany

Registered: 2011-02-01

Posts: 23

Encrypted root and swap on different volume

Hi all!

After using Arch for nearly 10 years on a notebook I decided to encrypt my system.
So I backed up root, encrypted root and swap (two different partitions) and moved data back.
I also set up EFISTUB and grub to use the correct cmdline.

root=UUID=4aa59449-e9cf-4d57-921b-5422559ef01f cryptdevice=/dev/sda2:cryptoroot:allow-discards

But now I want also hibernation to the encrypted swap back working. I added the resume hook,
but I'm not sure how the kernel can decrypt the swap at boot. I tried adding the same cryptdevice parameter
for my swap but that did not work (I guess kernel wants one one cryptdevice).

My other question would be, how can I unlock both volumes with the same passphrase.

I should have created a LVM, I tried with GPT on LUKS, but the kernel did not really scan it for partitions,
after reboot they were there but not enumerated by the kernel.

Thanks for help and happy christmas all
Jan Hieber

Last edited by jnhieber (2017-12-22 09:18:33)