Skip to content

guides/fde: clarify note on LUKS2 support in GRUB #621

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
ryanm0 wants to merge 1 commit into from
Closed

guides/fde: clarify note on LUKS2 support in GRUB #621

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions src/installation/guides/fde.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,9 +45,10 @@ Device Start End Sectors Size Type

## Encrypted volume configuration

[Cryptsetup](https://man.voidlinux.org/cryptsetup.8) defaults to LUKS2, yet GRUB
releases before 2.06 only had support for LUKS1. Therefore, it might make sense
to force LUKS1 if you wish to achieve better compatibility.
GRUB 2.06 added partial support for LUKS2, however LUKS2 will not work with GRUB
by default. See the [Arch Wiki](https://wiki.archlinux.org/title/GRUB#LUKS2) for
Copy link
Member

@paper42 paper42 Sep 5, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should mention that only PBKDF2 is supported and it won't work with the default Argon2i instead of linking to a whole wiki page. It's not that complicated.

information on using LUKS2 with GRUB. For simplicity, this guide forces the use
of LUKS1.

Keep in mind the encrypted volume will be `/dev/sda2` on EFI systems, since
`/dev/sda1` is taken up by the EFI partition.
Expand Down