Anonymous
10/22/25(Wed)14:48:10 No.106975068 >>106974843
>Handbook still doesn't detail how to enable FDE despite that it makes no sense to do that after the install
Yeah I agree that it's weird that that's missing. But the setup is pretty standard if you've ever done it before.
>dd the disk randomly (optional if you want to hide the usage later)
>cryptsetup luksFormat /dev/youdevice
>cryptsetup luksOpen /dev/yourdevice some_name
>/dev/mapper/some_name is now your root partition, use mkfs on it, unpack the stage3 tarball there and proceed as normal
>lsblk and grab the UUID of the mapped device, that's what you put into your fstab for your / mountpoint
>make sure you enable luks in whatever method you use to generate your initramfs, set the crypt_root kernel parameter on boot, and enable dm-crypt related shit in the kernel config
Personally I compiled crypt_root=/dev/disk/by-uuid/<the uuid
into my kernel (CONFIG_CMDLINE) so I don't have to bother with grub or anything. I also boot my kernel directly as an EFI stuf, with only refind as the boot selector.