The gist is: cryptsetup, you can use the defaults which uses aes-xts-plain64 with a 256 bit key. I like the -y and -v options. You'll need to create or modify the /etc/crypttab file, which takes the form of: <anyname> <uuid> none The name can be anything but I do it the anaconda way which is luks-<uuid> and then <uuid> is the LUKS UUID reported by blkid. Use that same UUID in the form rd.luks=UUID=<uuid> as a boot parameter in /etc/default/grub and then grub2-mkconfig -o /boot/grub2/grub.cfg or grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg as the case may be if you have a UEFI system And finally, the fstab entry is created the same as if it weren't encrypted, you still use the fs volume UUID as reported by blkid. And since i have it handy, the rsync command anaconda uses is: rsync -pogAXtlHrDx Chris Murphy -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
