![](https://programming.dev/pictrs/image/b58839d3-c738-4d27-a97b-f9fcfd5c8bbe.jpeg)
![](https://programming.dev/pictrs/image/028151d2-3692-416d-a8eb-9d3d4cc18b41.png)
I’ve seen people do a similar thing with a separate encrypted home partition which is decrypted by a key stored in your encrypted root.
Do you happen to have a link to this?
However, I’d strongly recommend you use an LVM on LUKS setup (this is what I do). That way you decrypt one partition and you don’t have to mess around with keyfiles. #LVM_on_LUKS
Looking at the wiki it seems doable (in relation to revising my script) and as far as I can tell the tradeoffs seems better than #LUKS on a partition
much appreciated for the recommendation!
cat dog caaat dogg, alone in the world is a little catdog