## cryptsetup open $swap_device $crypt_swap_name ## get uuid using e.g. lsblk -f swap_device=/dev/disk/by-uuid/2788eb78-074d-4424-9f1d-ebffc9c37262 crypt_swap_name=cryptswap ## one can optionally provide a keyfile device and path on this device ## to the keyfile keyfile_device=/dev/mapper/cryptroot keyfile_filename=etc/keyfile-cryptswap ## additional arguments are given to mount for keyfile_device ## has to start with --options (if so desired) #keyfile_device_mount_options="--options=subvol=__active/__" ## additional arguments are given to cryptsetup ## --allow-discards options is desired in case swap is on SSD partition cryptsetup_options="--type luks"