One thing that has bugged me about the FAQ guidance for disk encryption is that the swap volume is contained within the SOFTRAID volume. I presume it isn’t smart enough to know not to double encrypt swap pages. I’ve taken to setting vm.swapencrypt.enable=0, but in the past I’ve also created the swap volume outside of the SOFTRAID.
One thing that has bugged me about the FAQ guidance for disk encryption is that the swap volume is contained within the SOFTRAID volume. I presume it isn’t smart enough to know not to double encrypt swap pages. I’ve taken to setting
vm.swapencrypt.enable=0
, but in the past I’ve also created the swap volume outside of the SOFTRAID.