Gentoo install with full disk encryption
This guide serves my use case but can easily be adapted. I use 1 disk for boot and root partitions and another one for /home and will be encrypting both disks with luks2 only (no lvm) Start with creating the partitions on the first disk with parted, ~ # parted -a optimal /dev/nvme0n1 # Set the default units to mebibytes (parted) unit mib # Create a GPT partition table (parted) mklabel gpt # Create a boot partition (parted) mkpart primary fat32 1 769 (parted) name 1 boot (parted) set 1 BOOT on # Create the root partition using the remaining space on the disk (parted) mkpart primary 769 -1 (parted) name 2 root (parted) quit # Creating the following schema ~ # lsblk nvme0n1 disk ├─nvme0n1p1 768M part └─nvme0n1p2 110G part Create boot filesystem: ~ # mkfs.vfat -F32 /dev/nvme0n1p1 Prepare encrypted partition: ~ # cryptsetup --type luks2 -v -c aes-xts-plain64 -s 256 --hash sha256 --iter-time 2000 --pbkdf argon2id --use-urandom --verif...