Skip to content

suse-agama/encryption-enabled

Enable disk encryption for SLES 16+ Agama installations

Disk Encryption

Enable full disk encryption for the root partition using LUKS2 (default). When enabled, requires suse-agama/encryption-password to be set.

Default: true (matches AutoYaST behavior)

Requirements

  • Must set suse-agama/encryption-password when enabled
  • Encryption method can be configured via suse-agama/encryption-method

Notes

  • RHEL 10+ and SLES 16+ default to LUKS2 encryption
  • Encryption only applies to the root partition (boot partition remains unencrypted)
  • Password required at boot unless using TPM-based FDE

Objects that Reference suse-agama/encryption-enabled

Objects used by suse-agama/encryption-enabled

Not used in current content packs