suse-agama/encryption-method¶

Disk encryption method for SLES 16+ Agama installations

Disk Encryption Method¶

Encryption method to use when suse-agama/encryption-enabled is true.

Supported Methods¶

• luks2 (default) - Modern LUKS2 encryption with Argon2 key derivation
• luks1 - Legacy LUKS encryption (for compatibility)
• pervasiveLuks2 - LUKS2 variant for IBM Z systems
• tpm_fde - TPM-based Full Disk Encryption (automated unlocking)

Recommendations¶

• Use luks2 for new installations (RHEL 10+ and SLES 16+ default)
• Use tpm_fde for trusted environments requiring automated boot
• Use luks1 only for compatibility with older systems

Notes¶

• LUKS2 provides better security and performance than LUKS1
• TPM-based FDE requires compatible hardware

Objects that Reference suse-agama/encryption-method¶

• templates part-scheme-suse-agama.tmpl in Other OSes Installers as part of Contents (used)

Objects used by suse-agama/encryption-method¶

Not used in current content packs