Bug#1000948: grub2: Could not make LUKS2 work

Marc Dequènes (duck) duck at duckcorp.org
Wed Dec 1 05:07:39 GMT 2021


Source: grub2
Version: 2.04-20
Severity: normal

Quack,

My system originally was created as LUKS2 and then I found out GRUB did 
not support it and converted it to LUKS1. That was a while ago but that 
is to say it's already using PBKDF2 so it's easy to switch back and 
forth.

I upgraded my system with the recent release and the signed packaged 
came yesterday and now GRUB is properly displaying "2.06".

I had enabled GRUB_ENABLE_CRYPTODISK=y in /etc/default/grub already. I 
thus used the Debian installer rescue mode to convert with:
   cryptsetup convert --type=luks2 /dev/nvme0n1p2
I then got into the root fs (via the rescue menu) and issued an 
update-grub.
I rebooted and then was dropped into the GRUB shell.

I also added GRUB_PRELOAD_MODULES=luks2 just in case before switching to 
LUKS2 but that did not help. For the record while debugging  in the GRUB 
shell I got:
grub> insmod cryptodisk
grub> insmod luks2
error: file `/boot/grub/x86_64-efi/luks2.mod' not found.
IIUC it would need to be added to debian/build-efi-images.

I also found out the new grub.cfg does not contain any cryptodisk or 
luks* modules, so it seems grub-mkconfig is unable to generate a proper 
configuration in this case. I'm adding the working and broken 
configuration files as a reference.

My /etc/crypttab:
# <target name>	<source device>		<key file>	<options>
nvme0n1p2_crypt /dev/nvme0n1p2 none luks

Could you give me a hand?

Regards.
\_o<


-- System Information:
Debian Release: bookworm/sid
   APT prefers unstable-debug
   APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.0-2-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE 
not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- 
Marc Dequènes
-------------- next part --------------
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
insmod luks2
if [ -s $prefix/grubenv ]; then
  set have_grubenv=true
  load_env
fi
if [ "${next_entry}" ] ; then
   set default="${next_entry}"
   set next_entry=
   save_env next_entry
   set boot_once=true
else
   set default="0"
fi

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then
  set saved_entry="${prev_saved_entry}"
  save_env saved_entry
  set prev_saved_entry=
  save_env prev_saved_entry
  set boot_once=true
fi

function savedefault {
  if [ -z "${boot_once}" ]; then
    saved_entry="${chosen}"
    save_env saved_entry
  fi
}
function load_video {
  if [ x$feature_all_video_module = xy ]; then
    insmod all_video
  else
    insmod efi_gop
    insmod efi_uga
    insmod ieee1275_fb
    insmod vbe
    insmod vga
    insmod video_bochs
    insmod video_cirrus
  fi
}

if [ x$feature_default_font_path = xy ] ; then
   font=unicode
else
insmod part_gpt
insmod cryptodisk
insmod luks
insmod gcry_rijndael
insmod gcry_rijndael
insmod gcry_sha256
insmod lvm
insmod ext2
cryptomount -u ff654a895d9f47869f38dddc1e1f509b
set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
else
  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
fi
    font="/usr/share/grub/unicode.pf2"
fi

if loadfont $font ; then
  set gfxmode=auto
  load_video
  insmod gfxterm
  set locale_dir=$prefix/locale
  set lang=C
  insmod gettext
fi
terminal_output gfxterm
if [ "${recordfail}" = 1 ] ; then
  set timeout=30
else
  if [ x$feature_timeout_style = xy ] ; then
    set timeout_style=menu
    set timeout=5
  # Fallback normal timeout code in case the timeout_style feature is
  # unavailable.
  else
    set timeout=5
  fi
fi
### END /etc/grub.d/00_header ###

### BEGIN /etc/grub.d/05_debian_theme ###
insmod part_gpt
insmod cryptodisk
insmod luks
insmod gcry_rijndael
insmod gcry_rijndael
insmod gcry_sha256
insmod lvm
insmod ext2
cryptomount -u ff654a895d9f47869f38dddc1e1f509b
set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
else
  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
fi
insmod png
if background_image /usr/share/desktop-base/spacefun-theme/grub/grub-16x9.png; then
  set color_normal=light-gray/black
  set color_highlight=white/black
else
  set menu_color_normal=cyan/blue
  set menu_color_highlight=white/blue
fi
### END /etc/grub.d/05_debian_theme ###

### BEGIN /etc/grub.d/10_linux ###
function gfxmode {
	set gfxpayload="${1}"
}
set linux_gfx_mode=
export linux_gfx_mode
menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
	load_video
	insmod gzio
	if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
	insmod part_gpt
	insmod cryptodisk
	insmod luks
	insmod gcry_rijndael
	insmod gcry_rijndael
	insmod gcry_sha256
	insmod lvm
	insmod ext2
	cryptomount -u ff654a895d9f47869f38dddc1e1f509b
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	echo	'Loading Linux 5.15.0-2-amd64 ...'
	linux	/boot/vmlinuz-5.15.0-2-amd64 root=/dev/mapper/annael_sys-root ro  splash cgroup_enable=memory
	echo	'Loading initial ramdisk ...'
	initrd	/boot/initrd.img-5.15.0-2-amd64
}
submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option 'gnulinux-advanced-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-2-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-2-amd64-advanced-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod part_gpt
		insmod cryptodisk
		insmod luks
		insmod gcry_rijndael
		insmod gcry_rijndael
		insmod gcry_sha256
		insmod lvm
		insmod ext2
		cryptomount -u ff654a895d9f47869f38dddc1e1f509b
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-2-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-2-amd64 root=/dev/mapper/annael_sys-root ro  splash cgroup_enable=memory
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-2-amd64
	}
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-2-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-2-amd64-recovery-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod part_gpt
		insmod cryptodisk
		insmod luks
		insmod gcry_rijndael
		insmod gcry_rijndael
		insmod gcry_sha256
		insmod lvm
		insmod ext2
		cryptomount -u ff654a895d9f47869f38dddc1e1f509b
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-2-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-2-amd64 root=/dev/mapper/annael_sys-root ro single 
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-2-amd64
	}
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-1-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-1-amd64-advanced-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod part_gpt
		insmod cryptodisk
		insmod luks
		insmod gcry_rijndael
		insmod gcry_rijndael
		insmod gcry_sha256
		insmod lvm
		insmod ext2
		cryptomount -u ff654a895d9f47869f38dddc1e1f509b
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-1-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-1-amd64 root=/dev/mapper/annael_sys-root ro  splash cgroup_enable=memory
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-1-amd64
	}
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-1-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-1-amd64-recovery-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod part_gpt
		insmod cryptodisk
		insmod luks
		insmod gcry_rijndael
		insmod gcry_rijndael
		insmod gcry_sha256
		insmod lvm
		insmod ext2
		cryptomount -u ff654a895d9f47869f38dddc1e1f509b
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-1-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-1-amd64 root=/dev/mapper/annael_sys-root ro single 
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-1-amd64
	}
}

### END /etc/grub.d/10_linux ###

### BEGIN /etc/grub.d/20_linux_xen ###

### END /etc/grub.d/20_linux_xen ###

### BEGIN /etc/grub.d/20_memtest86+ ###
menuentry "Memory test (memtest86+)" {
	insmod part_gpt
	insmod cryptodisk
	insmod luks
	insmod gcry_rijndael
	insmod gcry_rijndael
	insmod gcry_sha256
	insmod lvm
	insmod ext2
	cryptomount -u ff654a895d9f47869f38dddc1e1f509b
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	linux16	/boot/memtest86+.bin
}
menuentry "Memory test (memtest86+, serial console 115200)" {
	insmod part_gpt
	insmod cryptodisk
	insmod luks
	insmod gcry_rijndael
	insmod gcry_rijndael
	insmod gcry_sha256
	insmod lvm
	insmod ext2
	cryptomount -u ff654a895d9f47869f38dddc1e1f509b
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	linux16	/boot/memtest86+.bin console=ttyS0,115200n8
}
menuentry "Memory test (memtest86+, experimental multiboot)" {
	insmod part_gpt
	insmod cryptodisk
	insmod luks
	insmod gcry_rijndael
	insmod gcry_rijndael
	insmod gcry_sha256
	insmod lvm
	insmod ext2
	cryptomount -u ff654a895d9f47869f38dddc1e1f509b
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	multiboot	/boot/memtest86+_multiboot.bin
}
menuentry "Memory test (memtest86+, serial console 115200, experimental multiboot)" {
	insmod part_gpt
	insmod cryptodisk
	insmod luks
	insmod gcry_rijndael
	insmod gcry_rijndael
	insmod gcry_sha256
	insmod lvm
	insmod ext2
	cryptomount -u ff654a895d9f47869f38dddc1e1f509b
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	multiboot	/boot/memtest86+_multiboot.bin console=ttyS0,115200n8
}
### END /etc/grub.d/20_memtest86+ ###

### BEGIN /etc/grub.d/30_os-prober ###
### END /etc/grub.d/30_os-prober ###

### BEGIN /etc/grub.d/30_uefi-firmware ###
### END /etc/grub.d/30_uefi-firmware ###

### BEGIN /etc/grub.d/40_custom ###
# This file provides an easy way to add custom menu entries.  Simply type the
# menu entries you want to add after this comment.  Be careful not to change
# the 'exec tail' line above.
### END /etc/grub.d/40_custom ###

### BEGIN /etc/grub.d/41_custom ###
if [ -f  ${config_directory}/custom.cfg ]; then
  source ${config_directory}/custom.cfg
elif [ -z "${config_directory}" -a -f  $prefix/custom.cfg ]; then
  source $prefix/custom.cfg
fi
### END /etc/grub.d/41_custom ###
-------------- next part --------------
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
insmod luks2
if [ -s $prefix/grubenv ]; then
  set have_grubenv=true
  load_env
fi
if [ "${next_entry}" ] ; then
   set default="${next_entry}"
   set next_entry=
   save_env next_entry
   set boot_once=true
else
   set default="0"
fi

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then
  set saved_entry="${prev_saved_entry}"
  save_env saved_entry
  set prev_saved_entry=
  save_env prev_saved_entry
  set boot_once=true
fi

function savedefault {
  if [ -z "${boot_once}" ]; then
    saved_entry="${chosen}"
    save_env saved_entry
  fi
}
function load_video {
  if [ x$feature_all_video_module = xy ]; then
    insmod all_video
  else
    insmod efi_gop
    insmod efi_uga
    insmod ieee1275_fb
    insmod vbe
    insmod vga
    insmod video_bochs
    insmod video_cirrus
  fi
}

if [ x$feature_default_font_path = xy ] ; then
   font=unicode
else
insmod lvm
insmod ext2
set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
else
  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
fi
    font="/usr/share/grub/unicode.pf2"
fi

if loadfont $font ; then
  set gfxmode=auto
  load_video
  insmod gfxterm
  set locale_dir=$prefix/locale
  set lang=en_US
  insmod gettext
fi
terminal_output gfxterm
if [ "${recordfail}" = 1 ] ; then
  set timeout=30
else
  if [ x$feature_timeout_style = xy ] ; then
    set timeout_style=menu
    set timeout=5
  # Fallback normal timeout code in case the timeout_style feature is
  # unavailable.
  else
    set timeout=5
  fi
fi
### END /etc/grub.d/00_header ###

### BEGIN /etc/grub.d/05_debian_theme ###
insmod lvm
insmod ext2
set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
else
  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
fi
insmod png
if background_image /usr/share/desktop-base/spacefun-theme/grub/grub-16x9.png; then
  set color_normal=light-gray/black
  set color_highlight=white/black
else
  set menu_color_normal=cyan/blue
  set menu_color_highlight=white/blue
fi
### END /etc/grub.d/05_debian_theme ###

### BEGIN /etc/grub.d/10_linux ###
function gfxmode {
	set gfxpayload="${1}"
}
set linux_gfx_mode=
export linux_gfx_mode
menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
	load_video
	insmod gzio
	if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
	insmod lvm
	insmod ext2
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	echo	'Loading Linux 5.15.0-2-amd64 ...'
	linux	/boot/vmlinuz-5.15.0-2-amd64 root=/dev/mapper/annael_sys-root ro  splash cgroup_enable=memory
	echo	'Loading initial ramdisk ...'
	initrd	/boot/initrd.img-5.15.0-2-amd64
}
submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option 'gnulinux-advanced-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-2-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-2-amd64-advanced-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod lvm
		insmod ext2
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-2-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-2-amd64 root=/dev/mapper/annael_sys-root ro  splash cgroup_enable=memory
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-2-amd64
	}
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-2-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-2-amd64-recovery-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod lvm
		insmod ext2
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-2-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-2-amd64 root=/dev/mapper/annael_sys-root ro single 
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-2-amd64
	}
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-1-amd64' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-1-amd64-advanced-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod lvm
		insmod ext2
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-1-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-1-amd64 root=/dev/mapper/annael_sys-root ro  splash cgroup_enable=memory
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-1-amd64
	}
	menuentry 'Debian GNU/Linux, with Linux 5.15.0-1-amd64 (recovery mode)' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-5.15.0-1-amd64-recovery-abcc3b9a-9e49-493b-80f5-825eaec521a1' {
		load_video
		insmod gzio
		if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
		insmod lvm
		insmod ext2
		set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
		else
		  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
		fi
		echo	'Loading Linux 5.15.0-1-amd64 ...'
		linux	/boot/vmlinuz-5.15.0-1-amd64 root=/dev/mapper/annael_sys-root ro single 
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initrd.img-5.15.0-1-amd64
	}
}

### END /etc/grub.d/10_linux ###

### BEGIN /etc/grub.d/20_linux_xen ###

### END /etc/grub.d/20_linux_xen ###

### BEGIN /etc/grub.d/20_memtest86+ ###
menuentry "Memory test (memtest86+)" {
	insmod lvm
	insmod ext2
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	linux16	/boot/memtest86+.bin
}
menuentry "Memory test (memtest86+, serial console 115200)" {
	insmod lvm
	insmod ext2
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	linux16	/boot/memtest86+.bin console=ttyS0,115200n8
}
menuentry "Memory test (memtest86+, experimental multiboot)" {
	insmod lvm
	insmod ext2
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	multiboot	/boot/memtest86+_multiboot.bin
}
menuentry "Memory test (memtest86+, serial console 115200, experimental multiboot)" {
	insmod lvm
	insmod ext2
	set root='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/fqOzjT-qps1-L6jh-vNnF-6WzJ-S0rU-Ptuez8/bDh7ac-60Aj-0xmp-rcri-TbP1-taiW-Bv5eqZ'  abcc3b9a-9e49-493b-80f5-825eaec521a1
	else
	  search --no-floppy --fs-uuid --set=root abcc3b9a-9e49-493b-80f5-825eaec521a1
	fi
	multiboot	/boot/memtest86+_multiboot.bin console=ttyS0,115200n8
}
### END /etc/grub.d/20_memtest86+ ###

### BEGIN /etc/grub.d/30_os-prober ###
### END /etc/grub.d/30_os-prober ###

### BEGIN /etc/grub.d/30_uefi-firmware ###
menuentry 'UEFI Firmware Settings' $menuentry_id_option 'uefi-firmware' {
	fwsetup
}
### END /etc/grub.d/30_uefi-firmware ###

### BEGIN /etc/grub.d/40_custom ###
# This file provides an easy way to add custom menu entries.  Simply type the
# menu entries you want to add after this comment.  Be careful not to change
# the 'exec tail' line above.
### END /etc/grub.d/40_custom ###

### BEGIN /etc/grub.d/41_custom ###
if [ -f  ${config_directory}/custom.cfg ]; then
  source ${config_directory}/custom.cfg
elif [ -z "${config_directory}" -a -f  $prefix/custom.cfg ]; then
  source $prefix/custom.cfg
fi
### END /etc/grub.d/41_custom ###


More information about the Pkg-grub-devel mailing list