On Sat, Jan 15, 2022 at 09:00:44PM +0000, Mikolaj Kucharski wrote:
> I'm wondering what is recommended setup for swap with full disk
> encryption. Because swap is encrypted by default I decided to put
> it outside of softraid crypto - sd0b, where OpenBSD is on sd1a and
> I guess kernel expects swap to be on sd1b:

Yes, the kernel expects to find the default swap partition on the disk
which also contains the root filesystem. I would not be surprised if
the boot loader looks for swap on the disk backed by the softraid crypto
volume and fails to unhibernate if no swap can be found there. This keeps
things simple in the boot loader code.

These are two different layers of encryption and it does not hurt at all
to use both. Performance differences are negligible on modern laptops,
especially if your machine has AES in CPU flags. Laptops usually have
enough ram nowadays to avoid much swapping in the first place. They will
likely only use this swap partition to support edge cases and hibernate.

Reply via email to