My system uses full disk encryption, including the boot partition. It basically follows the Arch wiki and uses GRUB, dm-crypt and luks. I have a single partition with both the boot and root filesystems. I specified the cryptdevice
on the GRUB_CMDLINE_LINUX
line of /etc/default/grub
and added GRUB_ENABLE_CRYPTODISK=y
to the file also. My system also has /crypto_keyfile.bin
included in the initrd
image so that I only have to enter the password once.
When booting the system, GRUB asks me for the password as I expect. If I enter the password correctly, everything boots fine. If I enter the password incorrectly, I immediately get dropped to GRUB rescue
.
I guess I have two questions. First, is it possible to have configure grub to allow a couple of failed attempts? Second, once being dropped into GRUB rescue
, how do I boot my system (besides using crtl-alt-delete
like I am now)?