This article explains how to setup disk encryption on openSUSE Tumbleweed so that the the kernel and the initrd are also encrypted. The initrd will be set up to not ask for the password again.
Since May 2021 openSUSE Tumbleweed has support for running encrypted KVM guests using AMD SEV-ES. This article explains the steps to setup and SEV-ES guest using libvirt on Tumbleweed.
