From 6951fc6f43140ebe0398e1db084a613efab8e45c Mon Sep 17 00:00:00 2001 From: Leah Rowe <leah@libreboot.org> Date: Sat, 21 Oct 2023 16:43:18 +0100 Subject: [PATCH] clarification 3 Signed-off-by: Leah Rowe <leah@libreboot.org> --- site/docs/linux/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/site/docs/linux/index.md b/site/docs/linux/index.md index 32038c0..6493a13 100644 --- a/site/docs/linux/index.md +++ b/site/docs/linux/index.md @@ -54,8 +54,8 @@ Encrypted /boot via LUKS2 with argon2 Full encryption for basic LUKS2 (with PBKDF or argon2 key derivation) is supported in libreboot. Legacy LUKS1 is also supported. On *most* other -systems, `/boot` must be encrypted, but Libreboot supports use of the -GRUB bootloader as a coreboot payload. +systems, `/boot` must be unencrypted, but Libreboot supports use of the +GRUB bootloader as a coreboot payload, directly in the boot flash. GRUB has code in it that can be used to unlock LUKS1 and LUKS2 dm-crypt, using the `cryptomount` command. With this, you can boot with *true* full -- GitLab