Arch Linux

ryanerwin

Member

Registered: 2018-04-28

Posts: 11

Have GRUB prompt for CryptDevice Password?

Full disk encryption has been working great for me, but I would to enter my description password into GRUB instead of in the following screen when the kernel is starting (and grub has moved from graphic mode into kernel boot text mode)

I think this is hinted to on the Wiki, but I haven't figured out the proper format...

https://wiki.archlinux.org/index.php/GR … _arguments

Relevant Files:

/etc/mkinitcpio.conf

HOOKS=(consolefont base udev autodetect keyboard keymap modconf block encrypt lvm2 filesystems resume fsck

/etc/default/grub

GRUB_CMDLINE_LINUX="cryptdevice=UUID=93a123e4-625a-4b4e-8fdf-53588df51eaf:lvmcrypt root=UUID=2c2b9c1e-4174-4b41-b36c-bca69736185a resume=UUID=55306dd8-6e90-455c-a0a4-0f3d0fd88b5e video=800x600"

GRUB_DEFAULT="saved"
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="Arch"
GRUB_CMDLINE_LINUX_DEFAULT=""

GRUB_PRELOAD_MODULES="part_gpt part_msdos"
GRUB_ENABLE_CRYPTODISK=y

GRUB_GFXMODE=1600x1200x32,800x600x32,auto
GRUB_GFXPAYLOAD_LINUX=false

GRUB_THEME=/boot/grub/themes/breeze/theme.txt
GRUB_SAVEDEFAULT="true"

When I was using text mode grub this wasn't so bad, but now that I've discovered grub themes and gfxmode, having a separate text mode prompt doesn't match the gfxmode theme at all...

eschwartz

Fellow

Registered: 2014-08-08

Posts: 4,097

Re: Have GRUB prompt for CryptDevice Password?

This is documented at https://wiki.archlinux.org/index.php/Dm … n#cryptkey

---

Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

ryanerwin

Member

Registered: 2018-04-28

Posts: 11

Re: Have GRUB prompt for CryptDevice Password?

This is documented at https://wiki.archlinux.org/index.php/Dm … n#cryptkey

Thanks for the documentation on cryptkey... Unfortunately I only have one USB port and have to use that for my USB keyboard/mouse receiver... Also, I'm really bad at remembering to remove "keys" from anything... A "usb key" would just mean no-key as I don't think I'll put it in my pocket every time I walk away...

So is it possible to get GRUB (rather than the text screen when booting the kernel) to prompt for the cryptdevice password, or is this just impossible?

eschwartz

Fellow

Registered: 2014-08-08

Posts: 4,097

Re: Have GRUB prompt for CryptDevice Password?

What do you mean by "grub"? You're saying you want graphical grub themes and you *don't* want text mode at all. Where do you want such a prompt to appear?

Grub has native support for LUKS-encrypted devices (which can unlock an initramfs containing your cryptkey for the kernel to then use). But, this will still be a text mode prompt, only it will appear *before* the grub menu, rather than *after*.

---

Managing AUR repos The Right Way -- aurpublish (now a standalone tool)