On Sat, Jan 15, 2022 at 09:00:44PM +0000, Mikolaj Kucharski wrote: > I'm wondering what is recommended setup for swap with full disk > encryption. Because swap is encrypted by default I decided to put > it outside of softraid crypto - sd0b, where OpenBSD is on sd1a and > I guess kernel expects swap to be on sd1b:
Yes, the kernel expects to find the default swap partition on the disk which also contains the root filesystem. I would not be surprised if the boot loader looks for swap on the disk backed by the softraid crypto volume and fails to unhibernate if no swap can be found there. This keeps things simple in the boot loader code. These are two different layers of encryption and it does not hurt at all to use both. Performance differences are negligible on modern laptops, especially if your machine has AES in CPU flags. Laptops usually have enough ram nowadays to avoid much swapping in the first place. They will likely only use this swap partition to support edge cases and hibernate.