Differences

This shows you the differences between two versions of the page.

--- installs:raspi:argon-oneup:home-setup [2026/03/01 16:39] – added end of steps elraphik
+++ installs:raspi:argon-oneup:home-setup [2026/03/01 20:42] (current) – change info size elraphik
@@ Line 9: / Line 9: @@
 <code bash>
 export DEVICE=/dev/nvme0n1
+export PART=/dev/nvme0n1p1
 # Wipe disk
 sudo wipefs -a $DEVICE
@@ Line 21: / Line 22: @@
 # Install cryptsetup and use it to encrypt the device with a passkey
 sudo apt update && sudo apt install cryptsetup -y
-sudo cryptsetup luksFormat $DEVICE
+sudo cryptsetup luksFormat $PART
 # Now open the device with passkey, it should be located at /dev/mapper/crypt_home now
-sudo cryptsetup open $DEVICE crypt_home
+sudo cryptsetup open $PART crypt_home
 export VOLUME=/dev/mapper/crypt_home
@@ Line 48: / Line 49: @@
 <code bash>
 # Retrieve UUID of the partition
-sudo blkid /dev/nvme0n1
+sudo blkid $PART
 # Should return /dev/nvme0n1: UUID="xxxxxxxx-xxxx-xxxx" TYPE="crypto_LUKS"
 sudo nano /etc/crypttab
-# Add crypt_home UUID=YOUR-UUID none luks
+# Add crypt_home UUID=YOUR-UUID none luks,initramfs
 # Now configure your fstab
-sudo blkid /dev/mapper/crypt_home
+sudo blkid $VOLUME
 sudo nano /etc/fstab
-# Add UUID=CRYPTHOME-UUID /home  ext4  defaults,noatime  0  2
+# Add /dev/mapper/crypt_home /home  ext4  defaults,noatime  0  2
 </code>
+<WRAP center round info 100%>
+If you pay attention here, you'll notice the "initramfs" option in the crypttab.\\
+I noticed that when booting, the prompt for the decryption passphrase does not appear if the disk decryption does not happen during the initramfs boot phase. If not present, it'll try to decypher during the systemd phase, in which you cannot interact with the prompt, so it will timeout and fail pretty hard.
+</WRAP>
 Okay now it's almost all set, just need to move some folders around :
@@ Line 76: / Line 83: @@
 # Regen initramfs
-sudo update-initramfs -u -k all
+sudo update-initramfs -c -k all
 # Now reboot