Hi John,
I believe the canonical way to do this is to set up LVM on LUKS. See pros and cons of different approaches in the table at https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Overview With LVM on LUKS, you only need to enter the passphrase once to unlock the LVM. All partitions inside the LVM are automatically unlocked as a result. Hope that helps! Regards, Arun