LUKS Notes

Arch wiki: https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system

Erase disk: https://wiki.archlinux.org/title/Dm-crypt/Drive_preparation https://wiki.archlinux.org/title/Solid_state_drive/Memory_cell_clearing

Luks on root: https://devconnected.com/how-to-encrypt-root-filesystem-on-linux/#Encrypting_Root_Filesystem_on_New_Disk

todo: luks on /boot

setup an encrypted disk: https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode

open an encrypted disk: cryptsetup open /dev/sda2 boot, then the block device is in /dev/mapper/boot

close an encrypted disk: cryptsetup close boot

Avoid enter password twice: https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Unlocking_the_root_partition_at_boot

---

Last update: July 14, 2021
Created: July 12, 2021