>
> Yes, entering the LUKS volume passphrase twice is normal, though I would
> love to hear about ways to improve it.  As I understand it, both GRUB
> and Linux have to unlock the LUKS volume, and they do not by default
> coordinate in any way - that is why you have to enter it two times.  I
> don't know how to arrange for a password to be entered only once, but I
> imagine that it may be possible, with varying degrees of security
> depending on the chosen solution.
>

You can use keyfiles to unlock the root partition.
<https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Unlocking_the_root_partition_at_boot>
That's what
I'm using on my arch setup to only have to type in one passphrase
instead of three (GRUB, root, swap). No idea how you would
translate this to GuixSD though.

2018-05-07 22:44 GMT-07:00 Chris Marusich <cmmarusich@gmail.com>:

> Divan Santana <divan@santanas.co.za> writes:
>
> > While talking about luks, is it normal/best practice to have the
> > passphrase on start up ask twice?  Once for boot vol at grub, and once
> > for /root I suppose?
>
> Yes, entering the LUKS volume passphrase twice is normal, though I would
> love to hear about ways to improve it.  As I understand it, both GRUB
> and Linux have to unlock the LUKS volume, and they do not by default
> coordinate in any way - that is why you have to enter it two times.  I
> don't know how to arrange for a password to be entered only once, but I
> imagine that it may be possible, with varying degrees of security
> depending on the chosen solution.
>
> --
> Chris
>



-- 
s/Fred[re]+i[ck]+/Fredrik/g