Encrypting an NVMe SSD with LUKS2 and Enabling Automatic Unlock on Fedora-family AlmaLinux for Raspberry Pi
On AlmaLinux 10.1 aarch64 running on Raspberry Pi 5, I encrypted the NVMe SSD's root partition with LUKS2 and configured it to skip passphrase entry at boot. /boot, which is read by the Raspberry Pi firmware, remains unencrypted, and the encrypted root is unlocked with a key in the initramfs.