With the release of grub v2.14 and associated support for argon2id pbkdf, I took the opportunity to upgrade the luks headers on my system (from luks to luks2) with encrypted /boot along the lines of:
- PSA: upgrade your LUKS key derivation function ; and
- Enable LUKS2 and Argon2 support for Grub in Manjaro/Arch | Ming Di Leom's Blog
Everything works fine, except that now grub always asks for my luks passphrase twice. My first passphrase entry always fails. Any ideas why this might be? The only thing that appeared to change in my /boot/grub/grub.cfg upon regeneration was loading of luks2 module in place of luks module.
Note that I am talking about the passphrase prompt before the grub boot menu. I do not get prompted for my passphrase after leaving the grub boot menu as /root is unlocked using a keyfile from initramfs.