My system uses full disk encryption, including the boot partition. It basically follows the Arch wiki and uses GRUB, dm-crypt and luks. I have a single partition with both the boot and root filesystems. I specified the cryptdevice on the GRUB_CMDLINE_LINUX line of /etc/default/grub and added GRUB_ENABLE_CRYPTODISK=y to the file also. My system also has /crypto_keyfile.bin included in the initrd image so that I only have to enter the password once.

When booting the system, GRUB asks me for the password as I expect. If I enter the password correctly, everything boots fine. If I enter the password incorrectly, I immediately get dropped to GRUB rescue.

I guess I have two questions. First, is it possible to have configure grub to allow a couple of failed attempts? Second, once being dropped into GRUB rescue, how do I boot my system (besides using crtl-alt-delete like I am now)?

1 Answer 1


Reading the documentation, you probably need, in order:

  1. The cryptomount command.
  2. Setting the $root variable to the mounted cryptofs (possibly through use of the search command.
  3. The normal command, which should load ($prefix)/grub.cfg

After which point the boot should function as if you had entered the correct password in the first place.

  • Links break. Using code blocks documents solutions on SE. Commented Apr 14, 2021 at 6:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .