/boot 256M FAT32 EFI System Partition
/root 200G EXT4 Encrypted System Root
/home 212G EXT4 Encrypted System Home
Encryption is done with dm-crypt and LUKS so I can use multiple keys and rotate them occasionally without re-encrypting the entire drive. I pretty much followed the Archlinux wiki articles on dm-crypt
I use a swap file rather than a swap partition since I only use it for system hibernate and not for actual swap. Since the surface is UEFI natively GPT was the obvious choice for partition format so cgdisk was the tool of choice here.
The 512GB SSD is split into
Encryption is done with dm-crypt and LUKS so I can use multiple keys and rotate them occasionally without re-encrypting the entire drive. I pretty much followed the Archlinux wiki articles on dm-crypt
I use a swap file rather than a swap partition since I only use it for system hibernate and not for actual swap. Since the surface is UEFI natively GPT was the obvious choice for partition format so
cgdiskwas the tool of choice here.