Use sd-encrypt hook to unlock encrypted partition

host_vars/xps/network.yml

@@ -6,4 +6,9 @@ local_network_address: 192.168.2.9/24
 local_network_dns: 192.168.2.254
 local_network_gateway: 192.168.2.254
 
+frans_network_ssid: KPNDD1056
+frans_network_address: 192.168.2.9/24
+frans_network_dns: 192.168.2.254
+frans_network_gateway: 192.168.2.254
+
 hostname: xps

tasks/network.yml

@@ -78,8 +78,13 @@
       loop:
         - src: 'templates/personal/xps/network/wlan0.link.j2'
           dest: '/etc/systemd/network/10-wlan0.link'
+
         - src: 'templates/personal/xps/network/wlan0-local.network.j2'
           dest: '/etc/systemd/network/10-wireless.network'
+
+        - src: 'templates/personal/xps/network/wlan0-frans.network.j2'
+          dest: '/etc/systemd/network/11-wireless.network'
+
         - src: 'templates/personal/xps/network/wlan0.network.j2'
           dest: '/etc/systemd/network/20-wireless.network'
 

templates/personal/xps/cmdline.j2

@@ -1 +1 @@
-cryptdevice=UUID=4483183a-4881-4bf6-b20c-3ba918642cc4:cryptlvm root=/dev/VolumeGroup/root rw resume=/dev/VolumeGroup/swap pcie_aspm=nommconf i915.fastboot=1 enable_fbc=1 enable_psr=1 disable_power_well=0 acpi_rev_override=1 bgrt_disable
+rd.luks.name=4483183a-4881-4bf6-b20c-3ba918642cc4=cryptlvm root=/dev/VolumeGroup/root rw resume=/dev/VolumeGroup/swap pcie_aspm=nommconf acpi_rev_override=1 bgrt_disable

templates/personal/xps/mkinitcpio/2-hooks.conf.j2

@@ -1,3 +1,3 @@
 # {{ ansible_managed }}
 
-HOOKS=(base udev autodetect microcode modconf kms keyboard keymap consolefont block encrypt lvm2 resume filesystems fsck)
+HOOKS=(base systemd autodetect microcode modconf kms keyboard sd-vconsole block sd-encrypt lvm2 resume filesystems fsck)

templates/personal/xps/network/wlan0-frans.network.j2

@@ -0,0 +1,16 @@
+# {{ ansible_managed }}
+
+[Match]
+MACAddress={{ wireless_interface_mac }}
+SSID={{ frans_network_ssid }}
+
+[Network]
+Address={{ frans_network_address }}
+DNS={{ frans_network_dns }}
+Gateway={{ frans_network_gateway }}
+DHCP=no
+MulticastDNS=yes
+LinkLocalAddressing=no
+IPv6AcceptRA=no
+IPv6SendRA=no
+RequiredForOnline=routable