Hey magical linux-oracle,

I recently made a full disk encryption on my computer via the debian installer.

I partitioned it like this:

SSD:

– unencrypted part –

Boot - 1GB space, mounting point: /boot

EFI - 512MB space, mounting point: ESP, bootable flag: on

– encrypted part –

Encrypted container with a volume group (vg-1) containing 3 logical volumes:

Root - 50GB space, mounting point: /

Swap - 30GB space, mounting point: swap

Home - Rest of space, mounting point: /home

& Second harddrive fully encrypted with one logical volume and mounting point /mnt/data

The install of linux worked pretty well.

Unfortunately, the hibernation part doesn’t work out of the box. When I press hibernate (or standby), it only goes to the lock screen. How can I solve that issue? (Is it even a good idea to use hibernation on encrypted devices?)

Second thing: As you can see from my setup, I use 2 disks. When I start up my system, I only need to enter my decryption password once (not twice for the 2nd HD) and I see, that my second hard disk seems to be mounted already. It seems that people usually struggle with typing in their passwords twice and want a solution for that. Is it possible, that debian automatically fixed this for me (It’s the same pw for both)?

Thanks!

~sp3ctre

  • _Vi@programming.dev
    7·
    3 days ago

    It should work with just one swap (encrypted), unless the swap is full at the moment of hibernation attempt.

    mkinitramfs-generated script should ask for the LUKS password, then it would start loading the pages.

    Note that hibernation in general may fail to work (regardless of encryption) if, for example, a signed kernel and Secure Boot is used.