Full disk encryption with LUKS2 + Argon

Grub is not the only available boot loader.

I take the easy route and have an unencrypted /boot - in that case, the grub limitations don’t matter.
But there are other ways which I have not explored myself.

dm-crypt/Encrypting an entire system - ArchWiki

1 Like