Comment 3 for bug 1627584

Revision history for this message
Steve Langasek (vorlon) wrote :

The error in your log is:

> grub-install: error: attempt to install to encrypted disk without cryptodisk enabled. Set `GRUB_ENABLE_CRYPTODISK=1' in file `/etc/default/grub'..

However, this is being installed for UEFI, which means the target disk must be an EFI System Partition and can't be encrypted. And this is an upgrade, which means you previously had grub2-signed installed, and we have not reduced the set of grub modules included in grub2-signed; /neither/ the new /nor/ the old version of grub-efi-amd64-signed that you had installed on your system has support for loading kernels from encrypted partitions.

Did you reconfigure your system to use encryption after installation? Did you manually install a version of grub with cryptodisk support, or is your /boot partition not properly mounted? Please attach /etc/fstab and the output of 'mount' from the affected system.