(In reply to Matt Weber from comment #3) > So if you LUKS encrypt root, > /home, and [SWAP], you would need to type 3 passwords during boot. The only > exception would be if @/home was a logical volume under root, in which case > it would be decrypted once root is decrypted. So I guess the second password is for the swap, because the root partition should be handled automatically by GRUB passing the password to the initramfs. > Once other note: > Since [SWAP] is encrypted, you may have difficulty resuming from a Hibernate > sleep state if you ever put the system in Hibernate mode. Personally I'm > not sure why anyone would do this because it's faster to boot the system > from a shutdown, so this is really just an FYI. It was available on the setup and I decided to do it because if the PC gets stolen while hybernating it could means data is in swap. On the other hand, I will probably remove it and replace it with a btrfs swap subvolume.