Arch Linux

z3nox

Member

Registered: 2018-11-03

Posts: 4

Boot at-rest encrypted Arch on ZFS with EFISTUB only

Hi,
following Installing Arch on ZFS I managed to install Arch Linux on an at-rest encrypted ZFS pool. However, booting directly from the UEFI does not work completely. I generated the entry in my UEFI using efibootmgr in the following way:

efibootmgr --create --disk /dev/disk/by-id/ata-XXX-part1 --part 1 loader /EFI/ARCH_direct/vmlinuz/linux --unicode 'root=zroot/encrypt/ROOT/default rw initrd=\EFI\ARCH_direct\initramfs-linux.img' --verbose --label "zfsarch direct"

When I restart my system I am dropped in a rootfs-Shell because the dataset cannot be mounted - I guess this is due to the zfs-hook expecting an unecrypted dataset. By typing

[rootfs ]# zpool import -l -R /new_root zroot
Enter passphrase for 'zroot/encrypt': _
[rootfs ]# exit

it is possible to boot correctly.

Now I am puzzled what to do in order for the initramfs to correctly prompt for the passphrase.
Can anyone help me? Are further information needed?