Editing Openai/695158d7-1b68-800b-a02f-4817bf1f6d25 (section)

==== - If you make a separate swap partition outside LUKS/LVM: - It will not be encrypted - Hibernation will write plaintext RAM to disk - This breaks Qubes security assumptions ====

✅ Keep swap inside the encrypted LVM.

==== <syntaxhighlight>/dev/nvme0n1 ====
├─ p1 600 MiB EFI System Partition   /boot/efi   (unencrypted)
├─ p2 1 GiB ext4                     /boot       (unencrypted)
├─ p3 150 GiB LUKS → LVM Thin        Notebook
│    ├─ qubes-dom0-root  20 GiB      /
│    ├─ qubes-dom0-swap  33 GiB      swap
│    └─ thinpool        ~97 GiB      VM storage
└─ p4 ~700 GiB ext4                   media      (unencrypted)

</syntaxhighlight>

✅ Bottom line
* Nothing under Notebook yet = normal
* Yes, create 33 GiB swap inside LVM for hibernation
* Let the installer create dom0 root + thin pool automatically
* Don’t make swap outside the encrypted LVM

If you want, I can make a click-by-click checklist for the installer GUI including setting dom0 root, 33 GiB swap, thin pool, and leaving media unencrypted — that usually clears up all confusion at once.

Do you want me to do that next?