Installation Encrypt option requires 2 inputs per boot

[Bunstonious]

Hello,

• Version: Rome

• DE: KDE

• Description: When using the “encrypt” option in the installer (I use a laptop so need encryption) it appears that the encryption password is required both before the bootloader and after when you’re loading the OS. Ideally it would be preferable to only need to enter the password once.

[2disbetter (Rocking Rock 5.0 on a Framework 13 (12th Gen Intel & 13th Gen Intel)))]

Seems kind of nice that progress is thwarted already before the OS even gets the hand off from the bootloader. Seems more secure, doesn’t it?

[zeroability]

The BTW crowd suggest this:
https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Avoiding_having_to_enter_the_passphrase_twice

[RedCardinal]

Installation with LUKS encryption requires passphrase to be entered twice on boot

Okay, So the folks at GitHub had a good workaround. I just confirmed it in a VM. In the live environment before running the installer, edit /etc/calamares/settings.conf and move -fstab down several lines until it’s immediately after - dracutlukscfg as seen here: [settings.conf] Move fstab after luksbootkeyfile · calamares/calamares@232a78b · GitHub The tradeoff is that you don’t get the graphical LUKS password prompt from Plymouth.

This is what I had to do. Hope it helps.