My system uses full disk encryption, including the boot partition. It basically follows the Arch wiki and uses GRUB, dm-crypt and luks. I have a single partition with both the boot and root filesystems. I specified the cryptdevice on the GRUB_CMDLINE_LINUX line of /etc/default/grub and added GRUB_ENABLE_CRYPTODISK=y to the file also. My system also has /crypto_keyfile.bin included in the initrd image so that I only have to enter the password once.

When booting the system, GRUB asks me for the password as I expect. If I enter the password correctly, everything boots fine. If I enter the password incorrectly, I immediately get dropped to GRUB rescue.

I guess I have two questions. First, is it possible to have configure grub to allow a couple of failed attempts? Second, once being dropped into GRUB rescue, how do I boot my system (besides using crtl-alt-delete like I am now)?


Reading the documentation, you probably need, in order:

  1. The cryptomount command.
  2. Setting the $root variable to the mounted cryptofs (possibly through use of the search command.
  3. The normal command, which should load ($prefix)/grub.cfg

After which point the boot should function as if you had entered the correct password in the first place.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.