nixos

lsblk.txt

sda        8:0    0 232.9G  0 disk  
├─sda1     8:1    0     1G  0 part  
│ └─boot 254:1    0  1022M  0 crypt /boot
├─sda2     8:2    0     4G  0 part  
└─sda3     8:3    0 227.9G  0 part  
  └─root 254:0    0 227.9G  0 crypt /nix/store
sr0       11:0    1  1024M  0 rom   

nixos-configuration.md

lazara

  # Use the GRUB 2 boot loader.
  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  # Define on which hard drive you want to install Grub.
  boot.loader.grub.device = "/dev/sda";
  boot.loader.grub.enableCryptodisk = true;

  boot.initrd.luks.devices = [ { name = "root"; device = "/dev/sda3"; } ];
  boot.initrd.postMountCommands = "cryptsetup luksOpen --key-file=/mnt-root/etc/crypto_keyfile_boot.bin /dev/sda1 boot";