GRUB Now Supports EXT4 File-Systems With Encryption
Written by Michael Larabel in GNU on 29 June 2017 at 09:33 AM EDT. 3 Comments
GNU --
The GRUB bootloader now supports file-systems making use of EXT4 file-system encryption but where the boot files are left unencrypted.

EXT4 for a while has supported native file-system encryption using fscrypt. GRUB now can deal with EXT4 file-systems having the encryption flag, but where the boot files are left unencrypted on that file-system.

GRUB isn't (at least not yet) able to support decrypting encrypted files with EXT4/fscrypt, but with the latest code is now at least able to handle the file-system gracefully where the EXT4_ENCRYPT_FLAG is set and the boot files are on there unencrypted.

Google's Eric Biggers added the support to GRUB Git, "Since GRUB cannot decrypt encrypted contents or filenames, just issue an error if it would need to do so. This is sufficient to allow unencrypted boot files to co-exist with encrypted files elsewhere on the filesystem."
Related News
About The Author
Author picture

Michael Larabel is the principal author of and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and automated benchmarking software. He can be followed via Twitter or contacted via

Popular News This Week