Skip to content

Why multiple LUKS containers? #39

Open

Description

@burdges

If you enter multiple encrypted partitions, then it prompts for different passwords for each partition, meaning seperate LUKS containers for each partition. This is typically a mistake.

You'd usually want exactly one LUKS container, and hence one password, which then contains several LVM containers. Debian installers do this by default when you request multiple encrypted partitions.

I've found some discussion of doing this manually at https://kennyballou.com/blog/2025/05/installing-guix/index.html and https://guix.gnu.org/manual/en/html_node/Mapped-Devices.html but another concern is the graphical installer does not give one parallel access to the shell, and the command line installer seems extremely hard to use.

Are there any reaosnable work arounds? It's maybe easier to install Debian so the disk can be setup correctly, but leave one partition inside the encrypted LVM where guix can be installed later?

Activity

  1. burdges commented on Nov 11, 2025

    @burdges
    Author

    I've maybe figured this out, Guix does not support LVM really, not for boot anyways.

    https://www.reddit.com/r/GUIX/comments/16fcgwh/guix_with_luks_lvm_btrfs/

    As Debian handles LVM fine, the solution maybe Debian make manage grub, and then use Guix seperately. ugh. lol

  2. amano-kenji commented on Nov 26, 2025

    @amano-kenji

    The one LUKS container unlocked with a password can contain keyfiles for other LUKS containers. Correct?

    I don't know whether guix supports this configuration, but the support can be written.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions