clarification 3

Signed-off-by: Leah Rowe <leah@libreboot.org>
master
Leah Rowe 2023-10-21 16:43:18 +01:00
parent 88869036a6
commit 6951fc6f43
1 changed files with 2 additions and 2 deletions

View File

@ -54,8 +54,8 @@ Encrypted /boot via LUKS2 with argon2
Full encryption for basic LUKS2 (with PBKDF or argon2 key derivation) is
supported in libreboot. Legacy LUKS1 is also supported. On *most* other
systems, `/boot` must be encrypted, but Libreboot supports use of the
GRUB bootloader as a coreboot payload.
systems, `/boot` must be unencrypted, but Libreboot supports use of the
GRUB bootloader as a coreboot payload, directly in the boot flash.
GRUB has code in it that can be used to unlock LUKS1 and LUKS2 dm-crypt,
using the `cryptomount` command. With this, you can boot with *true* full