handbook/disks: Update encrypted swap instructions for geli

Add instructions to initialize the geli swap device first. Also, be a
bit clearer on the /etc/fstab line to add for geli.

While here: fix a typo in the Camellia-CBC algorithm.

PR:			282806
Reviewed by:		carlavilla@
Event:			Halifax Hackathon 202606
Location:		Dalhousie CS Faculty building entrance hallway
Differential Revision:	https://reviews.freebsd.org/D57904

1 files changed, 9 insertions, 2 deletions

diff --git a/documentation/content/en/books/handbook/disks/_index.adoc b/documentation/content/en/books/handbook/disks/_index.adoc
index db966c3f67..1a83ba8f98 100644
--- a/documentation/content/en/books/handbook/disks/_index.adoc
+++ b/documentation/content/en/books/handbook/disks/_index.adoc
@@ -1912,7 +1912,7 @@ This control utility adds some features and uses a different scheme for doing cr
 It provides the following features:
 
 * Utilizes the man:crypto[9] framework and automatically uses cryptographic hardware when it is available.
-* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBCAES.
+* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBC.
 * Allows the root partition to be encrypted. The passphrase used to access the encrypted root partition will be requested during system boot.
 * Allows the use of two independent keys.
 * It is fast as it performs simple sector-to-sector encryption.
@@ -2078,7 +2078,14 @@ To encrypt the swap partition using man:gbde[8], add the `.bde` suffix to the sw
 /dev/ada0s1b.bde	none		swap	sw		0	0
 ....
 
-To instead encrypt the swap partition using man:geli[8], use the `.eli` suffix:
+To instead encrypt the swap partition using man:geli[8], initialize the device with a onetime key:
+
+[source,shell]
+....
+# geom eli onetime -d /dev/ada0s1b
+....
+
+Afterwards, add a line for the device with the `.eli` suffix to [.filename]#/etc/fstab#:
 
 [.programlisting]
 ....