GRUBCrypt¶

Introduction¶

We need to upstream the ability to open a partition with an external key.

Distributions like Ubuntu and Trisquel have patches, that probably comes from the grub crypt project that enables such functionality.

The FSF relies on such patches in their infrastructure to ensure that the rootfs of the vm remain encrypted.

As we need to deploy there, it's best to upstream such patches in order not to have to maintain them ourselves.

New upstreaming attempt¶

• https://lists.gnu.org/archive/html/grub-devel/2020-02/msg00057.html
• https://lists.gnu.org/archive/html/grub-devel/2020-02/msg00056.html