archinstall icon indicating copy to clipboard operation
archinstall copied to clipboard

Encrypting /home but not / leads to keyfile being written unencrypted to disk

Open davidhaller opened this issue 2 years ago • 1 comments

If you set an encryption passphrase, this passphrase is only used to encrypt the / partition while all other partitions are encrypted via keyfile, which is stored somewhere under /etc. This way you don't have to enter your passphrase multiple times for each partition beeing unlocked.

But if / is chosen to not be encrypted, archinstall still uses keyfiles to encrypt the other partitions, and doesn't use the passphrase at all, which is not was most users would want.

davidhaller avatar Jun 09 '23 21:06 davidhaller

Thank you for bringing this to our attention, this will be fixed!

Torxed avatar Jun 10 '23 07:06 Torxed