GRUB Lands LUKS2 Booting Support

HulaHoop · January 20, 2020, 2:33pm

Beneficial to Whonix Host whenever development restarts.

anontor · January 20, 2020, 9:19pm

This is definitely a welcome addition; so far, GRUB has implememted support for PBKDF2, and they hope to add more (namely argon2i and argon2id)

Patrick · January 21, 2020, 6:42am

Needs to be implemented in Debian installed (we’ll be using calamares).
Please post a feature request against calamares.

HulaHoop · January 22, 2020, 7:36pm

HulaHoop · January 23, 2020, 5:01pm

They already knew

github.com/calamares/calamares

cryptsetup 2.1 switches to LUKS2 by default

opened 10:26AM - 24 Feb 19 UTC

closed 04:49PM - 20 Nov 22 UTC

philmmanjaro

bug: downstream

**Describe the bug** Currently you will hit issues when **cryptsetup 2.1** is n…ot set to use **luks1** still as default. **grub** and other bootloaders still relay on **luks1** for now. **To Reproduce** Steps to reproduce the behavior: 1. Use an install media like **Manjaro 18.0.3** and try to install with encryption 2. You will land in a rescue shell as **grub** don't support **luks2** for `/boot` **Expected behavior** When **cryptsetup 2.1** is detected, we have to use `--type luks1` to explicitly use **luks1** for `/boot` encryption until **grub** might adopt **luks2** support. **Screenshots and Logs** ![fd74a7a1c8174229b3758e9f2b72ed1f3b59d294_2_690x335](https://user-images.githubusercontent.com/5050022/53297979-da117280-3826-11e9-9ba1-fe1d2f2827e3.jpeg) **Additional context** See also [release notes](https://gitlab.com/cryptsetup/cryptsetup/blob/master/docs/v2.1.0-ReleaseNotes) from **cryptsetup**.