GNU GRUB - Bugs: bug #55093, Add LUKS2 support
You are not allowed to post comments on this tracker with your current authentication level.
bug #55093: Add LUKS2 support
Submitter: | dllud <dllud> | ||
Submitted: | Sun 25 Nov 2018 01:32:49 PM UTC | ||
Votes: | 1039 | ||
Category: | Security | Severity: | Major |
Priority: | 5 - Normal | Item Group: | Feature Request |
Status: | None | Privacy: | Public |
Assigned to: | None | Originator Name: | |
Open/Closed: | Open | Release: | Git master |
Release: | Reproducibility: | None | |
Planned Release: | None |
( Jump to the original submission )
Sun 16 Jan 2022 06:32:39 PM UTC, comment #10: |
Peter Willis <peterww> |
Wed 12 Aug 2020 10:51:01 AM UTC, comment #9: 365e0cc3e7e44151c14dd29514c2f870b49f9755 did not update grub_util_get_dm_abstraction() in grub-core/osdep/devmapper/getroot.c, so "grub-probe -t abstraction" will still not recognize LUKS2 volumes, leading to e.g. this Debian bug. |
Gabor Gombas <gombasg> |
Fri 10 Jan 2020 07:05:13 PM UTC, comment #8:
|
nickb |
Fri 10 Jan 2020 05:11:01 PM UTC, comment #7: So far we've had 2.00, 2.02, 2.4, so based on this trend I would expect it to appear in a 2.06 release.
I've got no ideas about the developers' expected release timeframe, though. |
Eli Schwartz <eschwartz> |
Fri 10 Jan 2020 04:47:54 PM UTC, comment #6: Great news! Any idea about which GRUB version will include that patch, as well as the approximate release date of such version? |
dllud <dllud> |
Fri 10 Jan 2020 02:49:08 PM UTC, comment #5: Yay, this is implemented in https://git.savannah.gnu.org/cgit/grub.git/commit/?id=365e0cc3e7e44151c14dd29514c2f870b49f9755 |
Eli Schwartz <eschwartz> |
Mon 04 Nov 2019 09:41:02 PM UTC, comment #4: Thanks for the heads-up Graaskaeg! And thanks to Patrick Steinhardt for putting in the effort. Much appreciated.
It's a pity that Argon2i support is still missing. Hopefully Patrick can have a go at it once this major and necessary step is completed. |
dllud <dllud> |
Mon 04 Nov 2019 09:07:11 PM UTC, comment #3: For those following this bug, there looks to be good news on the GRUB-devel mailing list.
https://lists.gnu.org/archive/html/grub-devel/2019-11/msg00000.html
Patrick Steinhardt has prepared some patches to support LUKS2 disc encryption.
Thank you Patrick.
Graaskaeg |
Pontus Gråskæg <graaskaegp> |
Wed 29 May 2019 08:43:03 PM UTC, comment #2: For the crucial piece of infrastructure that Grub is to many distributions, this should have a higher priority. Not having LUKS2 support is increasingly going to reflect bad on Grub and GNU otherwise. (I know that cryptsetup isn't a GNU project, but it is licensed under GPL. And it is the only GPL-ed disk-encryption, LUKS is a gold standard.) |
Peter Passchier <pepa65> |
Fri 29 Mar 2019 08:58:21 AM UTC, comment #1: I second this request. Since cryptsetup now defaults to LUKS2 on all major distributions, the current setup of full-disk encryption with Calamares/cryptsetup/GRUB fails/breaks on all major distributions due to lack of LUKS2 support by GRUB.
Please add LUKS2 support to GRUB. Thank you.
Reference:
|
João Sousa <jotapesse> |
Sun 25 Nov 2018 01:32:49 PM UTC, original submission:
The LUKS2 format brings several advantages over the original LUKS format. Some of the most important are (1) data integrity protection and (2) memory-hard functions for key derivation.
GRUB supports the original LUKS format, allowing the setup of full-disk encryption (FDE) schemes where GRUB decrypts an encrypted /boot partition.
I found several references online (Arch Wiki, Stackoverflow, etc.) to the lack of LUKS2 support on GRUB. I decided to open this feature request since I could find no mention of LUKS2 on both the bug tracker and the mailing lists. |
dllud <dllud> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 1039 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 25 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2021-06-29 | calestyo | Carbon-Copy | - | ![]() |
Added calestyo |
2021-03-22 | je_vv | Carbon-Copy | - | ![]() |
Added je_vv |
2020-11-16 | ayers | Carbon-Copy | - | ![]() |
Added -email is unavailable- |
2020-08-12 | vaso | Carbon-Copy | - | ![]() |
Added vaso |
2019-11-25 | stigok | Carbon-Copy | - | ![]() |
Added stigok |
2019-11-06 | zlima12 | Carbon-Copy | - | ![]() |
Added zlima12 |
2019-11-05 | ynakao | Carbon-Copy | - | ![]() |
Added ynakao |
2019-11-04 | graaskaegp | Carbon-Copy | - | ![]() |
Added graaskaegp |
2019-10-18 | nickb | Carbon-Copy | - | ![]() |
Added nickb |
2019-09-27 | grub_luks2 | Carbon-Copy | - | ![]() |
Added grub_luks2 |
2019-09-17 | danij3l | Carbon-Copy | - | ![]() |
Added -email is unavailable- |
Carbon-Copy | - | ![]() |
Added danij3l | ||
2019-08-25 | archont | Carbon-Copy | - | ![]() |
Added archont |
2019-08-23 | astein58 | Carbon-Copy | - | ![]() |
Added astein58 |
2019-08-11 | fturco | Carbon-Copy | - | ![]() |
Added fturco |
2019-08-10 | toddward | Carbon-Copy | - | ![]() |
Added toddward |
2019-07-28 | sascha_silbe | Carbon-Copy | - | ![]() |
Added sascha_silbe |
2019-07-15 | safocl | Carbon-Copy | - | ![]() |
Added safocl |
2019-07-15 | vdanjean | Carbon-Copy | - | ![]() |
Added vdanjean |
2019-04-15 | nckx | Carbon-Copy | - | ![]() |
Added nckx |
2019-04-11 | deathtrip | Carbon-Copy | - | ![]() |
Added deathtrip |
2019-03-29 | jotapesse | Carbon-Copy | - | ![]() |
Added jotapesse |
2019-03-27 | arshin | Carbon-Copy | - | ![]() |
Added arshin |
2019-03-13 | trautwein | Carbon-Copy | - | ![]() |
Added trautwein |
2019-01-31 | eschwartz | Carbon-Copy | - | ![]() |
Added eschwartz |
It seems that LUKS2 support has been implemented, but there also seems to be bugs in the implementation (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945404). My suggestion is to close this bug and open a new one to address the new bugs