This is unmaintained. Let's find a new maintainer

[kmille]

Hey @ljfranklin @jugalgalaxyz

I just enabled Secure Boot on my device. The cryptboot scripts helped to understand and implement the whole thing. Unfortunately, it seems @xmikos can't/won't maintain the software anymore. I want to discuss some points with you:

1. As this is project is unmaintained and some improvements are outstanding: Let's find a new maintainer. We need to update the Arch Wiki and the AUR package. Are you interested? I can do it if you don't mind.

2. My /etc/crypttab does not contain my crypt device. I don't know why... So find_crypt_dev fails. Does this fail on your site (even if it's not super important)?
   

   cryptboot/cryptboot

   Line 4 in 16117e1

   find_crypt_dev() {

3. Regarding the PR Add cryptboot-grub-warning script #5 :
   I like the idea, but I have a different proposal: Instead of exiting /usr/local/bin/grub-install with an error, let's just call /usr/bin/grub-install with the parameters of /usr/local/bin/grub-install and then call cryptboot-efikeys sign $efi. What do you think about?

4. After upgrading GRUB from 2.04 to 2.06 I had to modify the script:

-    grub-install --target=x86_64-efi --boot-directory="$BOOT_DIR" --efi-directory="$EFI_DIR" --bootloader-id="$EFI_ID_GRUB"
+    grub-install --target=x86_64-efi --boot-directory="$BOOT_DIR" --efi-directory="$EFI_DIR" --bootloader-id="$EFI_ID_GRUB" --modules="tpm" --disable-shim-lock

The error I got was "error: verification requested but nobody cares: (cryptouuid/myUUID/grub/x86_64-efi/normal.mod.". Have you run into the same issue? Have you used the same workaround? The thing here is: I don't exactly understand the workaround. Maybe you know a little bit more about it.
Some resources for a better understanding:

• https://www.mail-archive.com/bug-grub@gnu.org/msg17008.html
• https://bugs.archlinux.org/task/71382
• https://bbs.archlinux.org/viewtopic.php?id=267944
• archlinux/svntogit-packages@4144617#diff-3e341d2d9c67be01819b25b25d5e53ea3cdf3a38d28846cda85a195eb9b7203a

If you like we can chat on IRC and post a summary here.

[kmille]

Hey @xmikos @ljfranklin @jugalgalaxyz
can you please review #8? From my point of view it's ready to ship. If you agree, I would like to

• update the Arch Wiki (there is a link to this repo at https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_(GRUB))
• update the upstream in the AUR packge

[kmille]

As it seems nobody likes to contribute, I will maintain this project in the future:
https://github.com/kmille/cryptboot
https://aur.archlinux.org/packages/cryptboot