# root /dev/mapper/vg-root none luks #home /dev/mapper/vg-home none luks #var /dev/mapper/vg-var none luks #swap /dev/mapper/vg-swap /dev/random swap,cipher=aes-xts-plain64:sha256