[Bug 1827928] [NEW] efi encrypted /boot grub installation does not include crypto support

[Jon Hood]

Public bug reported:

Installing with full disk encryption, including /boot, resulted in the
following error after grub loaded: "error: Can't find command
'cryptomount'"

This is identical to the OpenSUSE bug identified at
https://forums.opensuse.org/showthread.php/511111

Including an efi, secureboot grub image that is capable of encrypted
/boot filesystem mounting is essential for securing the desktop. I see
this issue as a prerequisite for bug #1773457.

OpenSUSE resolved this issue by including crypto support in their .efi
grub images. I believe that this should be the default for Ubuntu as
well, or an additional crypto-enabled grub efi package should be made
available.

** Affects: grub2-signed (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1827928

Title:
  efi encrypted /boot grub installation does not include crypto support

Status in grub2-signed package in Ubuntu:
  New

Bug description:
  Installing with full disk encryption, including /boot, resulted in the
  following error after grub loaded: "error: Can't find command
  'cryptomount'"

  This is identical to the OpenSUSE bug identified at
  https://forums.opensuse.org/showthread.php/511111

  Including an efi, secureboot grub image that is capable of encrypted
  /boot filesystem mounting is essential for securing the desktop. I see
  this issue as a prerequisite for bug #1773457.

  OpenSUSE resolved this issue by including crypto support in their .efi
  grub images. I believe that this should be the default for Ubuntu as
  well, or an additional crypto-enabled grub efi package should be made
  available.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-signed/+bug/1827928/+subscriptions