Incorrect documentation on Full Disk Encryption

[rhadamanthysan]

Near the end. the comand to install grub reflects only an installation bios/mbr and will not work on uefi systems. A second comand reflecting uefi install should exit.
grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id="Void" --recheck --removable

[rouben]

It seemed to work OK for me... although I believe xbps-reconfigure -fa will also do the trick, as it will trigger a rebuild of the initrd image (either with dracut or mkinitcpio) and also trigger a grub config rebuild and reinstallation.

There are also packages for aarch64 and x86_64 for grub EFI support, but those seem to be just symlinks to the grub package.

[rouben]

What didn't work for me on aarch64, was dracut decrypting the LUKS1 block device and initializing LVM properly.

The dracut rebuild script refuses to include /etc/crypttab in the initrd no matter what I tried, and without it, I had to use kernel boot parameters in the grub config file to tell dracut where to find the decryption key, the UUID of the LUKS1 partition and the name of the LVM.

I haven't tried the same with x86_64 to see if perhaps this is an architecture-linked issue, although I don't see why it would be architecture-related...