Installing GRUB on encrypted system with multiple drives
I am working on an (almost) fully encrypted system for my computer, with only /boot and /boot/efi being exposed. In itself that isn't very difficult, but I happen to have two drives which I want to encrypt, making this problem a little harder to solve.
The Setup
My plan is to have one drive hold /boot, /boot/efi, and an encrypted system partition including the system root /. The other drive contains only one luks partition which holds the /home partition. This leads to the problem that both drives need to be decrypted at startup in order to mount the directories correctly.
I want to enter only one password to decrypt both drives. To do this, I've set a password for the system drive, and generated a keyfile for the storage drive, the keyfile being stored in a directory of the encrypted system drive. Using the keyfile, the storage drive can be opened. Of course, I'll need to do some registration in crypttab and fstab to enable automatic mounting of the decrypted /home on startup.
The Issue
Unfortunately, the installers for Manjaro (both graphical and architect) fail installing GRUB correctly on my setup (architect hangs, graphical installs a grub that doesn't ask for a password, but instead already fails to find a disk with a specific UUID, most likely the decrypted mapped disk --> encryption must not have been registered correctly in grub). So, it seems I have to do this install on my own.
The Question
How would you go about installing GRUB on my encrypted system?
Last edited by MrLinuxUser12; 01-23-2019 at 07:52 AM.
|
