Re: Can grub-git be used to decrypt a LUKS2 encrypted partition? Testing Results

2020-08-30 Thread HardenedArray via Grub-devel
Hi Patrick, As a direct consequence of your valuable `--modules=` input, I have taken the time and attempted to carefully document my entire LUKS2 unlocking encrypted /boot process for the benefit of others, similarly situated. My procedure and comments are posted at: https://aur.archlinux.or

Re: Can grub-git be used to decrypt a LUKS2 encrypted partition? Testing Results

2020-08-30 Thread Patrick Steinhardt
On Sat, Aug 29, 2020 at 09:38:53PM -0400, Eli Schwartz wrote: > On 8/29/20 1:47 PM, Patrick Steinhardt wrote: > > This is usually done automatically by GRUB when starting. But as it'll > > not know to first decrypt the volume, it fails executing both of those > > commands just to show you the rescu

Re: Can grub-git be used to decrypt a LUKS2 encrypted partition? Testing Results

2020-08-30 Thread Patrick Steinhardt
On Sun, Aug 30, 2020 at 03:30:39PM +, HardenedArray via Grub-devel wrote: > As a direct consequence of your valuable `--modules=` input, I have > taken the time and attempted to carefully document my entire LUKS2 > unlocking encrypted /boot process for the benefit of others, similarly > situate

Re: Can grub-git be used to decrypt a LUKS2 encrypted partition? Testing Results

2020-08-30 Thread Patrick Steinhardt
On Sun, Aug 30, 2020 at 08:19:08PM +0200, Patrick Steinhardt wrote: > On Sun, Aug 30, 2020 at 03:30:39PM +, HardenedArray via Grub-devel wrote: > > Patrick, I've also noted Eli's further input, immediately below. > > > > Given that you now know exactly how I've encrypted / and how I unlock > >

Re: Can grub-git be used to decrypt a LUKS2 encrypted partition? Testing Results

2020-08-30 Thread HardenedArray via Grub-devel
Hi Patrick, Thank you for taking the time to have a look and if that LUKS2 unlocking process seems useful, please feel free to copypasta it, as needed. Surely, I understand on the changing partitions part, which is why I attempted to keep `/dev/sdXYZ` as generic as possible. Furthermore, I am