Ran into some trouble with my initial Qubes install on the Librem 14, as apparently changing any options in the disk partitioning unchecks the encryption box and renders it uncheckable. This is clearly a Qubes problem, and not a Purism problem, but it led me down a fun path of reinstalling a dozen times or so. That said, now I’m very well acquainted with PureBoot, my TPM, and my Librem Key.
I’ll work on A Rust Site Engine a bit on the Librem 14 today and see how I like it for Rust development.
@kyle actually default is now unencrypted boot with encrypted root on an lvm thin provisioned volume. That was the only option that worked. Going manual to do away with the unwanted swap broke it every single time, and I don’t care to waste any more of my vacation messing with it. When I get back to NL with a gigabit pipe I may try again, since restoring from backups is super fast now.