# cryptsetup luksOpen /dev/mmcblk0p2 cryptroot
# time e2fsck -f /dev/mapper/cryptroot
# resize2fs -Mp /dev/mapper/cryptroot # shrink

# gparted ## resize/move partition(s)

# resize2fs -p /dev/mapper/cryptroot # grow
# cryptsetup luksClose cryptroot

------------------

cryptsetup luksDump /dev/sdXY | grep -i Version

systemd-cryptenroll --fido2-device=auto /dev/LUKSDEVICE ## add key to partition
systemd-cryptenroll --fido2-device=list ## list available fido keys
fido2-token -L