git: ee930e81a0 - main - handbook/disks: Update encrypted swap instructions for geli

The branch main has been updated by bcr:

URL: https://cgit.FreeBSD.org/doc/commit/?id=ee930e81a02548fe7a5881fdaf385754a3dff07d

commit ee930e81a02548fe7a5881fdaf385754a3dff07d
Author:     Benedict Reuschling <bcr@FreeBSD.org>
AuthorDate: 2026-06-27 14:16:39 +0000
Commit:     Benedict Reuschling <bcr@FreeBSD.org>
CommitDate: 2026-06-27 14:48:33 +0000

    handbook/disks: Update encrypted swap instructions for geli
    
    Add instructions to initialize the geli swap device first. Also, be a
    bit clearer on the /etc/fstab line to add for geli.
    
    While here: fix a typo in the Camellia-CBC algorithm.
    
    PR:                     282806
    Reviewed by:            carlavilla@
    Event:                  Halifax Hackathon 202606
    Location:               Dalhousie CS Faculty building entrance hallway
    Differential Revision:  https://reviews.freebsd.org/D57904
---
 documentation/content/en/books/handbook/disks/_index.adoc | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/documentation/content/en/books/handbook/disks/_index.adoc b/documentation/content/en/books/handbook/disks/_index.adoc
index db966c3f67..1a83ba8f98 100644
--- a/documentation/content/en/books/handbook/disks/_index.adoc
+++ b/documentation/content/en/books/handbook/disks/_index.adoc
@@ -1912,7 +1912,7 @@ This control utility adds some features and uses a different scheme for doing cr
 It provides the following features:
 
 * Utilizes the man:crypto[9] framework and automatically uses cryptographic hardware when it is available.
-* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBCAES.
+* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBC.
 * Allows the root partition to be encrypted. The passphrase used to access the encrypted root partition will be requested during system boot.
 * Allows the use of two independent keys.
 * It is fast as it performs simple sector-to-sector encryption.
@@ -2078,7 +2078,14 @@ To encrypt the swap partition using man:gbde[8], add the `.bde` suffix to the sw
 /dev/ada0s1b.bde	none		swap	sw		0	0
 ....
 
-To instead encrypt the swap partition using man:geli[8], use the `.eli` suffix:
+To instead encrypt the swap partition using man:geli[8], initialize the device with a onetime key:
+
+[source,shell]
+....
+# geom eli onetime -d /dev/ada0s1b
+....
+
+Afterwards, add a line for the device with the `.eli` suffix to [.filename]#/etc/fstab#:
 
 [.programlisting]
 ....