xenithorb/grub2-crypto-enhance

Description

Fedora's stock grub2 packages with http://grub.johnlane.ie patches added.

Plagiarized from the above site:

Examples

1. Plain DMCrypt

This example assumes the default cipher and passphrase hash. These defaults are the same as the ones in cryptsetup: aes-cbc-essiv:sha256 and ripemd160 passphrase hash.

insmod cryptodisk
cryptomount -p hd1,1

2. Plain DMCrypt access to LUKS volume

This example opens a LUKS volume using plain DMCrypt. The volume master key is read from a file and the LUKS cipher and payload offset details are supplied as parameters.

insmod cryptodisk
cryptomount -p -k (hd0,1)/keyfile -K 256 -c aes-xts-plain64 -o 4096 hd1,1

3. LUKS

This example opens a LUKS voume and is the only method supported by upstream Grub.

insmod luks
cryptomount hd1,1

The device may alternatively be specified using the UUID contained in the LUKS header.

cryptomount -u af4b9159-8cbb-4122-b801-0c18adf26b3e

4. LUKS with detached header

This example opens a LUKS volume using a detached LUKS header.

insmod luks
cryptomount -H (hd0,1)/header hd1,1

5. LUKS with detached header and key file

insmod luks
cryptomount -H (hd0,1)/header -k (hd0,1)/keyfile hd1,1

6. LUKS with a 50 character passphrase embedded 30 bytes into key file.

insmod luks
cryptomount -k (hd0,1)/keyfile -O 30 -S 50 hd1,1

Installation Instructions

sudo dnf copr enable xenithorb/grub2-crypto-enhance

Active Releases

The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).

Release	Architectures	Repo Download
EPEL 7	x86_64 (111)*	EPEL 7 (119 downloads)
Fedora 39	i386 (68)*, x86_64 (87)*	Fedora 39 (0 downloads)
Fedora 40	i386 (53)*, x86_64 (85)*	Fedora 40 (27 downloads)
Fedora 41	i386 (64)*, x86_64 (67)*	Fedora 41 (15 downloads)
Fedora 42	i386 (4)*, x86_64 (36)*	Fedora 42 (1 downloads)
Fedora rawhide	i386 (108)*, x86_64 (158)*	Fedora rawhide (109 downloads)

* Total number of downloaded packages.