Package Details: cryptboot 1.2.1-1

Git Clone URL: https://aur.archlinux.org/cryptboot.git (read-only, click to copy)
Package Base: cryptboot
Description: Encrypted boot partition manager with UEFI Secure Boot support
Upstream URL: https://github.com/kmille/cryptboot
Licenses: GPL3
Submitter: Mikos
Maintainer: kmille
Last Packager: kmille
Votes: 11
Popularity: 0.003206
First Submitted: 2016-09-05 12:17 (UTC)
Last Updated: 2022-03-10 13:04 (UTC)

Latest Comments

tapir commented on 2022-06-17 11:50 (UTC)

This package shouldn't change the grub-install. You just cost me 16 hours of debugging why my secure boot doesn't work. Uninstall cryptboot and everything works as-is.

abouvier commented on 2022-03-10 13:54 (UTC) (edited on 2022-03-10 13:55 (UTC) by abouvier)

  • You cannot install anything to /usr/local [1]
  • etc/cryptboot.conf should be added to the backup=() array [2]

[1] https://wiki.archlinux.org/title/Arch_package_guidelines#Package_etiquette

[2] https://wiki.archlinux.org/title/PKGBUILD#backup

kmille commented on 2022-02-09 11:49 (UTC) (edited on 2022-02-09 11:50 (UTC) by kmille)

I adopted the package (and upstream repo) as Mikos is unresponsive and there were outstanding issues. The update to 1.2.0 consists of two main changes:
- the grub-install call now works with grub 2.06 (you don't need a hack like "sed -i 's/SecureBoot/SecureB00t/'")
- the package will install a /usr/local/bin/grub-install which will invoke cryptboot to install/update grub and sign the bootlaoder

Domminik commented on 2022-01-07 14:59 (UTC)

When using boot encryption with grub 2.06, error "verification requested but nobody cares" can be worked around by using method described on https://wejn.org/2021/09/fixing-grub-verification-requested-nobody-cares.

Modify /usr/bin/cryptboot function update-grub by adding "sed -i 's/SecureBoot/SecureB00t/' /efi/EFI/GRUB/grubx64.efi" (around line 117, just before signing the boot image).