Initramfs with systemd & LUKS

Sun, 31 Jul 2022 02:20:45 +0000

TL;DR

[me@mycomputer]# cat /etc/sbupdate.conf | grep "^CMDLINE_DEFAULT"
CMDLINE_DEFAULT="rd.luks.uuid=c1f995f5-a8f7-47f0-b085-6d3a159e1874 rd.luks.allow-discards resume=UUID=51384ac6-f197-41d9-b8c8-c9607d7e01c8 rd.udev.log-priority=3 nvme.noacpi=1 quiet splash root=UUID=a645810c-ef87-4a9a-9239-afdeaf292e6e rw"

[me@mycomputer]# cat /etc/mkinitcpio.conf | grep "^HOOKS"
HOOKS=(systemd keyboard autodetect sd-vconsole modconf block sd-encrypt lvm2 filesystems fsck)

My old boot process looks like this:

UEFI (with secure boot on)
systemd-boot
unified kernel.efi (initramfs + kernel params + kernel all rolled into one efi and signed)
initramfs (busybox)
encrypt hook: detects that a password is needed -> prompt for password
Unlock LUKS partition
LVM hook detects the LUKS partition and loads the logical volume groups/volumes
The root partition is loaded and control gets passed off to the real kernel

Which was set up via the following configs:

Boot on sugar, spice, &terminal? nice

Initramfs with systemd & LUKS

TL;DR