The supported setup in Ubuntu is to have a non-encrypted /boot partition with / encrypted with LUKS2. This combined with Secure Boot should not be a security downgrade at all.
We do not support GRUB unlocked FDE or encrypted /boot at this point, and LUKS1 support is left in GRUB as an accident of history. For supported partitioning schemes, please look at what the Ubuntu installer does. Mate Kukri -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2043101 Title: Mantic+noble inadvertently includes the luks2 module in signed grub- efis To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2043101/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
