You are not logged in.

#1 2021-03-25 18:56:05

user7894
Member
Registered: 2021-03-25
Posts: 1

Does GRUB support luks2? Or why I get GRUB "unknown filesystem" error?

Hi,
I'm trying to install Arch Linux on encrypted partition.
I created the 20G partition and formatted it with cryptsetup luksFormat /dev/sda2.
As far as I know, cryptsetup version > 2.0 uses luks2 as default instead of luks1. Then I continue simple installation, add encrypt hook to mkinitcpio, add cryptdevice parameter to grub config and install grub.
But after reboot I get the error:

error: no such device: [UUID]
error: unknown filesystem
Entering rescue mode...
grub rescue>

But, if I use command cryptsetup luksFormat /dev/sda2 --type=luks1 for formatting the partition, then it works fine (but for some reasons it asks for the password twice, before grub menu and after).
Why grub doesn't work with luks2? Does it support luks2?
Hope for your help!

Offline

#2 2021-03-25 20:54:04

cmm11
Member
Registered: 2018-02-18
Posts: 10

Re: Does GRUB support luks2? Or why I get GRUB "unknown filesystem" error?

Offline

#3 2021-03-25 21:05:55

frostschutz
Member
Registered: 2013-11-15
Posts: 1,048

Re: Does GRUB support luks2? Or why I get GRUB "unknown filesystem" error?

Grub has limited LUKS2 support (LUKS2 header with LUKS1 pbkdf2 keyslot, no argon2i support yet)

https://git.savannah.gnu.org/cgit/grub. … 05598f418c

I use unencrypted /boot

Last edited by frostschutz (2021-03-25 21:10:23)

Offline

#4 2021-03-25 22:30:47

progandy
Member
Registered: 2012-05-17
Posts: 4,236

Re: Does GRUB support luks2? Or why I get GRUB "unknown filesystem" error?

frostschutz wrote:

Grub has limited LUKS2 support (LUKS2 header with LUKS1 pbkdf2 keyslot, no argon2i support yet)

That will be in the next grub release Edit: right some limited support was already released. I didn't realize that it was finally merged.

Last edited by progandy (2021-03-25 22:39:01)


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

Board footer

Powered by FluxBB