My system uses full disk encryption, including the boot partition. It basically follows the Arch wiki and uses GRUB, dm-crypt and luks. I have a single partition with both the boot and root filesystems. I specified the
cryptdevice on the
GRUB_CMDLINE_LINUX line of
/etc/default/grub and added
GRUB_ENABLE_CRYPTODISK=y to the file also. My system also has
/crypto_keyfile.bin included in the
initrd image so that I only have to enter the password once.
When booting the system, GRUB asks me for the password as I expect. If I enter the password correctly, everything boots fine. If I enter the password incorrectly, I immediately get dropped to
I guess I have two questions. First, is it possible to have configure grub to allow a couple of failed attempts? Second, once being dropped into
GRUB rescue, how do I boot my system (besides using
crtl-alt-delete like I am now)?