From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <glkdd-dm-crypt@m.gmane.org>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 7p_fgG9NTa8R for <dm-crypt@saout.de>;
 Sat,  3 Aug 2013 21:46:02 +0200 (CEST)
Received: from plane.gmane.org (plane.gmane.org [80.91.229.3])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Sat,  3 Aug 2013 21:46:01 +0200 (CEST)
Received: from list by plane.gmane.org with local (Exim 4.69)
 (envelope-from <glkdd-dm-crypt@m.gmane.org>) id 1V5hm2-0002W9-Ob
 for dm-crypt@saout.de; Sat, 03 Aug 2013 21:45:58 +0200
Received: from c-50-132-41-203.hsd1.wa.comcast.net ([50.132.41.203])
 by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
 id 1AlnuQ-0007hv-00
 for <dm-crypt@saout.de>; Sat, 03 Aug 2013 21:45:58 +0200
Received: from eternaleye by c-50-132-41-203.hsd1.wa.comcast.net with local
 (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00
 for <dm-crypt@saout.de>; Sat, 03 Aug 2013 21:45:58 +0200
From: Alex Elsayed <eternaleye@gmail.com>
Date: Sat, 03 Aug 2013 12:49:39 +0000
Message-ID: <ktjml4$3f8$1@ger.gmane.org>
References: <CALtW_aiGJQcDKUNh9Na2DsgdHfecFZs1F1g-8JmAv6-9LgO+7w@mail.gmail.com>
 <20130803174753.GB7854@tansi.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7Bit
Subject: Re: [dm-crypt] Cryptsetup FAQ montly pointer 8/13
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

Arno Wagner wrote:
> It does not work for encrypted swap. And it cannot work,
> as the UUID is stored in the partition itself. Just the same
> as an empty partition does not have an UUID...
> 
> Arno

If you're on GPT then you have to option of PARTUUID and PARTLABEL,
which *are* present in such cases - that only works for raw partitions,
but may be something to think about.

I dodge the whole thing by putting my LVM PV on top of LUKS, and then having 
my swap in an LV. I need persistent swap (and thus LUKS, not random key) for 
hibernation anyway, and doing it as described brings the number of keys 
needed down to 1.

If I *had* RAID, I'd go (bottom to top) RAID -> LUKS -> LVM -> Swap/FS.