While I'm trying to get Encrypted /boot and a detached LUKS header on USB to work,
I had a couple of questions come to mind:

1. Does the backup USB key need to be updated?
2. If so, then how would someone keep all backups up to date?

I probably asked a dumb question but if anyone can help guide me through the steps I'd really appreciate you!🤗🌻

cross-posted from: https://lemm.ee/post/43472689

For context:
I've encrypted the swap partition with:

 bash

    
cryptsetup -v luksFormat /dev/${DEVICE}
cryptsetup luksOpen /dev/${DEVICE} swap

  

And what I want is for the user to be able to enter their password only once to decrypt their root partition which would contain a keyfile to then decrypt their swap partition.

Does anyone know if this is possible?
Just thought I'd ask to see if anyone's done this already

Links:

• Dm-crypt Unlocking - With a keyfile embedded in the initramfs
• Dm-crypt - Automated unlocking and mounting

Installed Arch this weekend. My transition is now complete :P

Does updating more often make things break more often? Or does updating less often make things more likely to break when you do finally update? Or do things randomly break regardless and there's not a damn thing you can do to prevent it either way?

If anyone else is having problems with the latest updates making their ax200 wifi speed capped at 3.4mb/s and has found a fix that doesn't involve buying new hardware or reinstalling the os, I would love to hear it.

I would like to think installing new updates will eventually fix the problem but I've never seen updates fix anything Iike that ever, not even once.