Package Details: grub-git 2.12.rc1.r106.g7c8ae7dcb-1

Git Clone URL: https://aur.archlinux.org/grub-git.git (read-only, click to copy)
Package Base: grub-git
Description: GNU GRand Unified Bootloader (2)
Upstream URL: https://www.gnu.org/software/grub/
Licenses: GPL3
Conflicts: grub
Provides: grub
Submitter: ka2107
Maintainer: WoefulDerelict
Last Packager: WoefulDerelict
Votes: 17
Popularity: 0.003483
First Submitted: 2013-10-22 18:55 (UTC)
Last Updated: 2023-12-18 22:58 (UTC)

Dependencies (21)

Required by (309)

Sources (7)

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 7 8 9 .. 18 Next › Last »

air-g4p commented on 2020-06-23 09:41 (UTC) (edited on 2020-06-23 17:06 (UTC) by air-g4p)

@eschwartz - grub-git still fails to boot from a LUKS2 disk.

Steps to reproduce the LUKS2 boot failure from a currently, properly booting --type luks1 encrypted /boot Arch system:

  1. UEFI boot from any reasonably recent arch iso, and run: cryptsetup convert /dev/sdXY --type luks2 --pbkdf pbkdf2 That command will succeed, and luksDump will show PBKDF: pbkdf2 for both keyslot 0 and 1. However, carefully note, you get the exact same pbkdf2 luksDump results by ONLY running: cryptsetup convert /dev/sdXY --type luks2 so it may be that cryptsetup is ignoring the appended --pbkdf pbkdf2 option. Additionally, man cryptsetup does not mention the --pbkdf option under the convert command. That same --pbdkf string is a valid option under the luksConvertKey command, but that command can only modify the pbkdf parameters for an existing LUKS2 keyslot.

  2. Run cryptsetup open /dev/sdXY <something>

  3. mount everything and arch-chroot into /

  4. Run mkinitcpio -P linux

  5. Run grub-install --target=x86_64-efi --efi-directory=/efi --bootloader-id=<some-id>

  6. Run grub-mkconfig -o /boot/grub/grub.cfg

  7. exit, umount and reboot.

  8. Then you are greeted by the dreaded: error: disk 'lvmid/some-lengthy-UUID' not found. Entering rescue mode.

Again, if anyone discovers the correct grub-git LUKS2 encrypted /boot procedure, please carefully document it here.

drossbox commented on 2020-06-22 18:36 (UTC)

@eschwartz apologies for not replying sooner - I got busy at work after compiling this and never switched to Luks2. I'll make a copy of my /boot onto my NFS share this weekend and try converting the existing partition to Luks2 using pbkdf2.

eschwartz commented on 2020-06-22 15:48 (UTC)

And did you use cryptsetup convert with the default pbkdf which is argon2i, or did you remember to pass --pbkdf pbkdf2 ?

The former is not yet implemented in grub and obviously cannot work. The latter is a non-default option to cryptsetup, which you may have forgotten...

I still have yet to see anyone actually confirm they tried using pbkdf2 and still got failures. I still have yet to see anyone actually confirm which one they used, in fact.

air-g4p commented on 2020-06-22 10:17 (UTC)

@WoefulDerelict - I built and installed grub-git without issue after your latest bump in February. However, after converting my / to LUKS2, reinstalling grub and re-running grub-mkconfig, my system refused to boot due to my LUKS2 conversion. Reverting back to LUKS1, of course, fixed everything.

WoefulDerelict commented on 2020-04-23 21:44 (UTC)

Builds are currently succeeding on my test machine; however, I don't use LUKS or have the time spin up and test the LUKS2 support. If any brave users are willing to experiment please report back.

I'm currently in the process of reading through the recent commits as a some of these changes appear to fix issues the PKGBUILD has been working around. Once I've got all the unnecessary workarounds trimmed out and tested the resulting build I'll push an update.

eschwartz: Thanks for all the updates.

eschwartz commented on 2020-04-22 14:19 (UTC)

@drossbox,

How did it turn out?

drossbox commented on 2020-03-13 22:18 (UTC)

@eschwartz thanks for letting me know. Built successfully, so I'll test Luks2 support over the weekend.

eschwartz commented on 2020-03-11 14:09 (UTC)

As of 17 hours ago, various build fixes have landed in upstream master.

(The Argon2 KDF feature is still being reviewed, though.)

So if anyone is interested in testing out luks2 support, now might be a good time. Especially since the code freeze for grub 2.06 is being called in less than a week.

eschwartz commented on 2020-03-08 00:45 (UTC)

The grub issues with --enable-mm-debug should hopefully be fixed by https://lists.gnu.org/archive/html/grub-devel/2020-03/msg00090.html

air-g4p commented on 2020-02-16 01:03 (UTC)

@WoefulDerelict

Thank you for taking the time to provide your superb backgrounder! Your thoughts really helped me to understand grub-git's PKGBUILD and your strategy on a much deeper level.

All the best....

« First ‹ Previous 1 2 3 4 5 6 7 8 9 .. 18 Next › Last »