Differences between revisions 8 and 9
Revision 8 as of 2015-10-29 22:19:14
Size: 2961
Editor: ?KjoHansiGlaz
Comment: Add instructions for encrypted /boot
Revision 9 as of 2016-01-24 17:47:35
Size: 2958
Editor: ?Vozoo
Comment: Killing an "s" in config file path in #Configure_encrypted_/boot. I believe it must be a typo.
Deletions are marked like this. Additions are marked like this.
Line 37: Line 37:
== Configure encrypted /boot/ == == Configure encrypted /boot ==
Line 43: Line 43:
 1. add {{{GRUB_ENABLE_CRYPTODISK=y}}} to {{{/etc/defaults/grub}}}  1. add {{{GRUB_ENABLE_CRYPTODISK=y}}} to {{{/etc/default/grub}}}
Line 45: Line 45:
 2. backup the contents of your {{{/boot/}}} partition somewhere  2. backup the contents of your {{{/boot}}} partition somewhere

Translation(s): English - Français

Configure console menu colors

As of DebianWheezy, there is no support for easily modifying the colors of the console menu. /etc/default/grub does not have any variables that can set the colors for this video mode.

The easiest way to modify the console menu colors is to create a new file /boot/grub/custom.cfg and put your configurations there:


set color_normal=light-gray/black

The variables that control the console menu colors are the following:

  • color_normal - the “normal” foreground and background terminal colors

  • color_highlight - the “highlight” foreground and background terminal colors

  • menu_color_normal - the foreground and background colors to be used for non-highlighted menu entries

  • menu_color_highlight - the foreground and background colors to be used for the highlighted menu entry

If you configured /boot/grub/custom.cfg, there is no need to run update-grub; the file will be automatically loaded by /boot/grub/grub.conf at boot.

Configure graphical splashimage

  • install the grub2-splashimages package: aptitude install grub2-splashimages

  • choose one of the nice images to use as the splashimage. You can look at the images with any image viewer (Ex: display)
  • configure/add the GRUB_BACKGROUND variable in /etc/default/grub. Ex: GRUB_BACKGROUND="/usr/share/images/grub/Lake_mapourika_NZ.tga"

    • make sure that GRUB_TERMINAL=console is commented out. The graphical mode will not be enabled if this is uncommented. By default it's commented, so you shouldn't worry too much.

  • the graphical resolution can be changed via the variable GRUB_GFXMODE

  • run update-grub

  • reboot to observe the change

See also Grub/SplashImage, GrubEFIReinstall

Configure encrypted /boot

Grub 2.02~beta2-29 supports reading an encrypted /boot partition.

Assuming you already have an encrypted system as setup by debian installer:

  1. add GRUB_ENABLE_CRYPTODISK=y to /etc/default/grub

  2. backup the contents of your /boot partition somewhere

  3. create an LUKS container where your /boot partition was and unlock it

  4. create an ext2 filesystem your LUKS container and mount it to /boot

  5. restore the backup of your /boot partition to your new encrypted /boot

  6. grub-install and update-grub