@aeva I just had an encrypted home partition, not an encrypted root partition, so it could be somewhat different depending on your system… if you’re using UEFI and have a different boot partition it should be similar though. The init boot image needs to have the stuff for dm crypt or whatever inside of it so that it can decrypt the partition during boot. I used mkinitcpio on arch, not dracut, but I suspect it’s similar. I don’t think I had to do anything with grub itself, but if you’re doing an MBR install and no separate boot partition, you might have to enable encryption support in grub itself. But that’s rare on modern-ish hardware.