When making the initrd.gz and in various conf files (like elilo.conf) you have to refer to the now encrypted partitions.
Maybe describing my system might give some pointers:
The system starts up from a separate SSD disk (/dev/sdb) that contains the EFI partition and all the programs (i.e. / and the rest, apart from /home) -which is not encrypted-; only my other disk (/dev/sda) with all documents (/home), /var and the swap-partition is, with LUKS/LVM as described for the lilo-setup.
I originally used elilo to boot the UEFI-system, but I have now refind doing it to enable booting from a rescue-USB in a simple manner, but elilo is kept in place. The UEFI setup was working before I had the encryption on the data-drive after upgrading to a bigger disc.
the makeinitrd command used:
mkinitrd -c -k <kernel> -m ext4 -f ext4 -r /dev/sdb1 -h /dev/<luks/lvm-swap-partition>/swap -C /dev/sda5 -L -l gb -o initrd-<kernel>.gz
the generic kernel and initrd carry in the names their version numbers which refind needs to load it. These are copied to /boot/efi/EFI/Slackware/
where, in /boot/efi/EFI/Slackware/elilo.conf:
Code:
prompt
chooser=simple
delay=1
timeout=10
#
image=vmlinuz-generic-4.4.38
label=vmlinuz
initrd=initrd-4.4.38.gz
read-only
append="root=proc vga=normal ro resume=/dev/<luks/lvm-swap-partition>/swap"
and in /boot/efi/EFI/Slackware/refind_linux.conf
Code:
"Boot with standard options" "ro root=UUID=<long label> resume=/dev/<luks/lvm-swap-partition>/swap "
"Boot to single-user mode" "ro root=UUID=<long label> single"
"Boot with minimal options" "ro root=UUID=<long label>"
Sometimes after a hung system or hard shutdown on the next boot my passphrase is not recognized; only after a restart (ctrl/del/alt) during booting this works (again). I do not know why.
Good luck with setting it up.
rob