Re: Encrypted /boot partition gets decrypted twice during boot

2025-02-05 Thread john doe
On 2/3/25 23:39, Automætic wrote: Hi, I'm configuring a new Debian installation on my workstation, with both the /boot partition and the root filesystem encrypted: - /dev/nvme0n1p1 -> /EFI - /dev/nvme0n1p2 -> LUKS2 (pbkdf2) -> /boot - /dev/nvme0n1p3 -> LUKS2 -> LVM containing root and other vol

Re: Encrypted /boot partition gets decrypted twice during boot

2025-02-04 Thread Michel Verdier
On 2025-02-03, Automætic wrote: > Both devices are properly configured in /etc/crypttab with the UUIDs > for /dev/nvme0n1p2 and /dev/nvme0n1p3 respectively (as outputted by > blkid). You set this manually ? > I checked the initramfs contents using 'unmkinitramfs' in > /tmp/initramfs/ to review m

Re: Encrypted /boot partition gets decrypted twice during boot

2025-02-04 Thread Loren M. Lang
On Tue, Feb 04, 2025 at 09:52:03AM +0100, to...@tuxteam.de wrote: > On Tue, Feb 04, 2025 at 12:18:10AM -0800, Loren M. Lang wrote: > > On Mon, Feb 03, 2025 at 10:39:25PM +, Automætic wrote: > > > Hi, > > > > > > I'm configuring a new Debian installation on my workstation, with both > > > the

Re: Encrypted /boot partition gets decrypted twice during boot

2025-02-04 Thread tomas
On Tue, Feb 04, 2025 at 12:18:10AM -0800, Loren M. Lang wrote: > On Mon, Feb 03, 2025 at 10:39:25PM +, Automætic wrote: > > Hi, > > > > I'm configuring a new Debian installation on my workstation, with both the > > /boot partition and the root filesystem encrypted: > > - /dev/nvme0n1p1 -> /EF

Re: Encrypted /boot partition gets decrypted twice during boot

2025-02-04 Thread Loren M. Lang
On Mon, Feb 03, 2025 at 10:39:25PM +, Automætic wrote: > Hi, > > I'm configuring a new Debian installation on my workstation, with both the > /boot partition and the root filesystem encrypted: > - /dev/nvme0n1p1 -> /EFI > - /dev/nvme0n1p2 -> LUKS2 (pbkdf2) -> /boot > - /dev/nvme0n1p3 -> LUKS2

Re: Encrypted /boot partition gets decrypted twice during boot

2025-02-04 Thread didier gaumet
Hello, From what I understand, a year ago, grub2 upstream LUKS2 support was still only initial and thus not complete: https://savannah.gnu.org/bugs/?55093 So it still probably better to stick with LUKS1 for /boot for now

Encrypted /boot partition gets decrypted twice during boot

2025-02-03 Thread Automætic
Hi, I'm configuring a new Debian installation on my workstation, with both the /boot partition and the root filesystem encrypted: - /dev/nvme0n1p1 -> /EFI - /dev/nvme0n1p2 -> LUKS2 (pbkdf2) -> /boot - /dev/nvme0n1p3 -> LUKS2 -> LVM containing root and other volumes The system boots, but requires