Teemu Likonen wrote: > I think the usual and better way is to have an unencrypted /boot and a > single other LUKS partition which contains LVM logical volumes for > everything else (swap, / and whatever). So swap is encrypted too. I have > had this setup for ages on desktop and laptop and it has always worked > (including s2disk). +1