After the update-initramfs and reboot, I always get prompted to decrypt the / partition first and then prompted to decrypt the swap partition second (checked the uuid's against lsblk to determine this). This order is always preserved.

Hmm, swap should not even be password-encrypted...
What's the content of your /etc/crypttab?

The non-comments in /etc/crypttab are:

luks-5bdc5cfe-a86a-469c-812f-92b36f70113e UUID=5bdc5cfe-a86a-469c-812f-92b36f70113e     none luks
luks-6c7421c7-77e9-49eb-b902-16439cc1366b UUID=6c7421c7-77e9-49eb-b902-16439cc1366b     none luks

I selected the default partitioning option.

You can fix this by changing the parameters of whetever is your swap partition to /dev/urandom swap,cipher=aes-xts-plain64,size=256,
e.g.:
luks-aaaaaaaa-a86a-469c-812f-92b36f70113e UUID=aaaaaaaa-a86a-469c-812f-92b36f70113e /dev/urandom swap,cipher=aes-xts-plain64,size=256

https://forums.puri.sm/t/on-boot-lvm-is-asking-the-same-password-twice/3547

What should actually happen here is / being decrypted with a password, and swapfs being decrypted with a keyfile on /.
Or, as a second option, swapfs being reformatted at boot time.

@mladen.pejakovic That's a different issue that was already fixed a while ago.
The one in this bug is actually even older and has been in PureOS forever (we just didn't see it because initramfs updates aren't triggered that often, and it is not that severe in its impact).

I fixed this bug, which unfortunately brought us another (already known) bug of the swap partition not unlocking properly.

@mak

I have reported a problem
3-steps-needed-to-start-using-laptop-instead-of-2-steps-before
which Mladen linked to this tracker.

I have updated to the latest pureOS image today but I still have the problem. Let me describe it.

After the OS update from 3 weeks ago this is the message I see on my screen just after pressing the power button to start up my laptop:

first screen

I don't have to input my encryption password for this first screen. After pressing Enter and after the system takes around 10 seconds to move on, I get to the usual encryption password screen. This second screen requires the proper password to be input. If a wrong password is input then the system stays on this screen.

second screen

Before I started having this issue 3 weeks ago, after pressing the power button to start my laptop, I would directly get the second screen asking for the encryption password.

This is not ideal to now have a third step inserted that requires to press Enter + waste an additional 10 seconds durint the startup process.

I don't know if the problem I am describing here is related to the issues you have resolved in this tracker.

Appreciate any help to solve my issue.

Thanks.

@jsbret This very much sounds like a different issue that was solved a while ago. Check your /etc/default/grub for GRUB_ENABLE_CRYPTODISK, that option and associated settings should not be enabled (otherwise GRUB tries to decrypt /, which it shouldn't attempt to).

@mak Thanks for the advice. I commented the line

#GRUB_ENABLE_CRYPTODISK=y

and restarted the laptop twice. But that did not solve my issue.

According to recent posts on my initial thread
3-steps-needed-to-start-using-laptop-instead-of-2-steps-before
other users have had the same issue.

Would be good to find a solution.

My /etc/default/grub file currently looks like this after the change you proposed:

GRUB_DEFAULT=0
GRUB_HIDDEN_TIMEOUT=0
GRUB_HIDDEN_TIMEOUT_QUIET=true
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR=‘PureOS’
GRUB_CMDLINE_LINUX_DEFAULT=“quiet cryptdevice=UUID=708e0d88-4db9-4713-a5ac-aea1abe6e832:luks-708e0d88-4db9-4713-a5ac-aea1abe6e832 root=/dev/mapper/luks-708e0d88-4db9-4713-a5ac-aea1abe6e832 resume=/dev/mapper/luks-708e0d88-4db9-4713-a5ac-aea1abe6e832 splash”
GRUB_CMDLINE_LINUX=""

@jsbret Replace the
GRUB_CMDLINE_LINUX_DEFAULT=“quiet cryptdevice=UUID=708e0d88-4db9-4713-a5ac-aea1abe6e832:luks-708e0d88-4db9-4713-a5ac-aea1abe6e832 root=/dev/mapper/luks-708e0d88-4db9-4713-a5ac-aea1abe6e832 resume=/dev/mapper/luks-708e0d88-4db9-4713-a5ac-aea1abe6e832 splash”
line with
GRUB_CMDLINE_LINUX_DEFAULT=“quiet splash”
ensure GRUB_ENABLE_CRYPTODISK is commented out and then run sudo update-grub and you should be fine.

Problem solved! Thank you so much @mak