Hi,

I am using three luks encrypted disks for an bare-metal Kali installation.

nvme1n1p2_crypt UUID=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx none luks,discard
nvme1n1p3_crypt UUID=yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy none luks,discard
nvme1n1p4_crypt UUID=zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz none luks,discard

<file system> <mount point> <type> <options> <dump> <pass>

/dev/mapper/nvme1n1p2_crypt / btrfs defaults,subvol=@ 0 0
... and all the other subvolumes ...
/dev/mapper/nvme1n1p3_crypt /data btrfs defaults 0 0
/dev/mapper/nvme1n1p4_crypt none swap sw 0 0

When I boot the system, Kali asks for an password for nvme1n1p2_crypt and for nvme1n1p4_crypt.
It seems to decrypt nvme1n1p2 and nvme1n1p3 with one password entry.
For nvme1n1p4 I must enter the password a second time.
All luks passwords are equal.
All disks can successfully be decrypted with that password (however, need to enter it twice).

There is just one thing I did during the installation.
In the partitioning dialog, I created the luks partitions for / and /data first.
The system wrote random data on the partitions, created the two luks containers and returned to the partitioning dialog.
In a second step, I created a luks partition for the SWAP (initially forgot it).
The system wrote random data on the partition, created the luks container and returned to the partitioning dialog.
I continued with the rest of the installation.

It somehow looks like if only the luks containers that were created together can be opened with a single password entry.
The swap partition, which was created separately, requires me to enter the password again.

Any idea, how I can get all three partitions being decrypted with just entering the password once?

Btw. to me it looks like decrypt_derived, decrypt_keyctl, etc. scripts are no longer being used by Kali and there is being another mechanism in place to decrypt multiple disks.
Is this correct?

Best regards
The fisherman