Actually the bottomLuks generates most of the power.

Well considdering it was posted by a user with the username "communism" i will assume bottomLuks

Yes, perhaps I should have named them outerLuks and innerLuks... oh well lol

You wouldn’t LUKS a floppy?

I remember years ago investigating alternatives to VMware vSAN and doing hyperconverged storage clusters in Red Hat with glusterFS in top of a couple of other layers. Feels rickety as heck putting it all together but it works well. Hard sell for “normal” people who expect to hit a Next button and get some pretty graphical chart though.

You can also just split the password for a single LUKS into two parts and give one each to the two people :D

Tbf this would enforce the order in which the two people decrypt it, which may not be good if you expect these two people to "arrive" asyncrhonously and you don't want them to have to wait for the other before entering their password/key. But maybe that's too specific of a use case.

not really if you have a hardware chip that does the encrypt/decrypting

Above and/or below LUKS!

So these days I use LVMRAID instead of mdraid. Underneath it uses mdraid but it's a bit easier to use since it's self-contained in LVM.

Take my angry upvote, you heathen.

You guys are going to blow your top when you hear about DFC (Distributed Fragment Cryptography)

I have an SSD and an HDD—I was considering on my next distro hop to put the root partition on the SSD and home partition on the HDD, decrypt the SSD and top level of the HDD upon boot, then decrypt the bottom level of the HDD upon user login. I'm sure many will think that's overkill or silly, but hey, if you have full disk encryption you'll have to enter two passwords to get into your computer anyway, just means your personal files get protected with two passwords. I would agree it's mostly gimmicky but I still want to try it out lol