I have recently installed Manjaro : 17.0.5 with LUKS encryption of over all system.
Computer runs UEFI.
As far as I understand the system is unlocked twice 1 time /boot partition with GRUB loader, and 2 time / root partition. Root partition is automatically unlocked with /crypto_keyfile.bin, so 2 time user is not asked to enter passphrase. Right?
I need help to
- make /boot unlockable with crypto_keyfile.bin stored on USB flash drive.
- make / root unlockable with crypto_keyfile.bin stored on USB flash drive, so I am able to move/remove /crypto_keyfile.bin from root partition.