--- efiSystemPartition: "/boot/efi" efiSystemPartitionSize: "512M" efiSystemPartitionName: "EFI" defaultFileSystemType: "btrfs" # NOTE: there is no `btrfsSubvolumes:` key in this Calamares version's # partition module schema (confirmed against /usr/share/calamares/modules/ # partition.conf and on real hardware — zero mentions of "subvolume" # anywhere in the stock reference config). A previous version of this file # had one; Calamares silently ignored it. Calamares' partition module only # natively creates @ (root) and @home (home) when btrfs + separate /home is # selected — nothing else. @snapshots/@log/@cache are created by hand in # post-install.sh instead, after unpackfs has populated the filesystem. userSwapChoices: - none - small - suspend - file # Full-disk encryption (LUKS) is enabled by default in Calamares' partition # module (enableLuksAutomatedPartitioning defaults to true) — the checkbox # already shows on the "Erase disk" page with no config needed here. Pin the # LUKS generation explicitly rather than relying on Calamares' own implicit # default: GRUB doesn't support LUKS2 + Argon2id, only PBKDF2, and using the # wrong KDF produces an encrypted install GRUB can't unlock at boot. luks1 # is unconditionally safe with BOS's plain grub-install setup (no separate # unencrypted /boot — GRUB itself has to unlock the LUKS container to read # the kernel). See post-install.sh for the matching cryptsetup/mkinitcpio/ # GRUB wiring this actually needs to be bootable. luksGeneration: luks1