Credit to @ryanc@infosec.exchange

I just did the graphic

  • redjard@reddthat.com
    link
    fedilink
    arrow-up
    1
    ·
    8 days ago

    I do the same and use ugrd. I think dracut would also work.
    You just set the resume kernel parameter to the decrypted memory device with the swapfile offset.
    As long as the initrd attempts a resume after it decrypted all volumes it’ll work, and the initrd doesn’t even need to understand why and what was resumed from