# ls -l /dev/mapper/
total 0
crw------- 1 root root 10, 236 Feb 15 01:15 control
lrwxrwxrwx 1 root root       7 Feb 15 01:15 crux-root -> ../dm-2
lrwxrwxrwx 1 root root       7 Feb 15 01:15 crux-swap -> ../dm-1
lrwxrwxrwx 1 root root       7 Feb 15 01:15 luks-415e4dfd-03a7-4c3c-b9f6-125961655ea4 -> ../dm-0


# cryptsetup status luks-415e4dfd-03a7-4c3c-b9f6-125961655ea4
/dev/mapper/luks-415e4dfd-03a7-4c3c-b9f6-125961655ea4 is active and is in use.
  type:    LUKS2
  cipher:  aes-xts-plain64
  keysize: 512 [bits]
  key location: keyring
  device:  /dev/sda2
  sector size:  512 [bytes]
  offset:  32768 [512-byte units] (16777216 [bytes])
  size:    66547712 [512-byte units] (34072428544 [bytes])
  mode:    read/write


# lvdisplay 
  --- Logical volume ---
  LV Path                /dev/crux/swap
  LV Name                swap
  VG Name                crux
  LV UUID                xpo3qp-x1rZ-AJ3C-Qt51-Y8tW-3tiZ-3rKgwf
  LV Write Access        read/write
  LV Creation host, time crux, 2026-02-15 00:10:08 +0000
  LV Status              available
  # open                 1
  LV Size                2.00 GiB
  Current LE             512
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           253:1
   
  --- Logical volume ---
  LV Path                /dev/crux/root
  LV Name                root
  VG Name                crux
  LV UUID                oA6wYq-GVOv-iEt7-vjiH-B9NO-IZ7p-dfHKEq
  LV Write Access        read/write
  LV Creation host, time crux, 2026-02-15 00:10:15 +0000
  LV Status              available
  # open                 1
  LV Size                29.73 GiB
  Current LE             7611
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           253:2

   
# find /boot/efi
/boot/efi
/boot/efi/EFI
/boot/efi/EFI/grub
/boot/efi/EFI/grub/grubx64.efi


# df -h / /boot /boot/efi
Filesystem             Size  Used Avail Use% Mounted on
/dev/mapper/crux-root   30G  4.8G   24G  17% /
/dev/mapper/crux-root   30G  4.8G   24G  17% /
/dev/sda1              253M  314K  252M   1% /boot/efi


# cat /etc/default/grub 
GRUB_CMDLINE_LINUX_DEFAULT="quiet"
GRUB_CMDLINE_LINUX="rd.auto=1 rd.luks=1 rd.luks.name=60e130fc-2dac-4f67-89f5-3f270e4d3f7e=crux rd.luks.key=/etc/luks/crux.key:/"
GRUB_ENABLE_CRYPTODISK=y
GRUB_THEME="/usr/share/grub/themes/catppuccin-mocha-grub-theme/theme.txt"

#/dev/mapper/crux-root: LABEL="/" UUID="60e130fc-2dac-4f67-89f5-3f270e4d3f7e" BLOCK_SIZE="4096" TYPE="ext4"
#BOOT_IMAGE=(lvm/crux-root)/boot/vmlinuz-6.12.35 root=/dev/mapper/crux-root rd.auto=1 rd.luks=1 rd.luks.name=60e130fc-2dac-4f67-89f5-3f270e4d3f7e=crux ro


# pkginfo -i | grep grub2
grub2 2.12-1
grub2-efi 2.12-1


# zgrep CRYPTO_XTS /proc/config.gz 
CONFIG_CRYPTO_XTS=m


# lsmod | grep crypto
# lsmod | grep xts
xts                    12288  1


# cat /etc/dracut.conf.d/fde.conf 
install_items+=" /etc/luks/crux.key "


# helpful links:
https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_(GRUB)
https://wiki.archlinux.org/title/GRUB#Encrypted_/boot
https://forums.gentoo.org/viewtopic-t-1062058-start-0.html