Installation with disk encryption, can't boot

Hi everyone,

I am installing Manjaro on my new laptop (Lenovo X1). I come from Ubuntu so this had been quite a long road for me.

To setup disk encryption, I have followed the instructions detailed here: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#LVM_on_LUKS

After updating grub's config, I rebooted, and I have the following error:

error: disk 'lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg' not found.

Apparently I am not the first to experience this error but I could not find a concrete solution (some people had trouble because of the hooks' order in mkinitcpio.conf, but my order seems correct).

Any idea why this is happening?

Here's some info about my setup:

[manjaro@manjaro ~]$ lsblk -mf
NAME                   SIZE OWNER GROUP MODE       FSTYPE      LABEL    UUID                                   FSAVAIL FSUSE% MOUNTPOINT
loop0                 76.1M             brw-rw---- squashfs                                                          0   100% /run/miso/sfs/livefs
loop1                275.5M             brw-rw---- squashfs                                                          0   100% /run/miso/sfs/mhwdfs
loop2                    1G             brw-rw---- squashfs                                                          0   100% /run/miso/sfs/desktopfs
loop3                467.6M             brw-rw---- squashfs                                                          0   100% /run/miso/sfs/rootfs
sda                   28.8G             brw-rw---- iso9660     MJRO1801 2018-12-22-14-52-01-00                                
├─sda1                 1.9G             brw-rw---- iso9660     MJRO1801 2018-12-22-14-52-01-00                       0   100% /run/miso/bootmnt
└─sda2                   4M             brw-rw---- vfat        MISO_EFI E099-17B4                                             
nvme0n1                477G             brw-rw----                                                                            
├─nvme0n1p1            550M             brw-rw---- vfat                 C96D-5EF6                                             
└─nvme0n1p2          476.4G             brw-rw---- crypto_LUKS          2140c3d4-90a1-4ac4-ae65-381c34002177                  
  └─cryptlvm         476.4G             brw-rw---- LVM2_member          tQUGMp-1UBD-OEZA-4YWv-7iPc-nTKu-C7QL5B                
    ├─container-swap    32G             brw-rw---- swap                 5f639cb3-f741-4e82-b804-10430e8c208e                  
    ├─container-root    32G             brw-rw---- ext4                 722e9a90-33ed-422f-9ccb-0bab78b3713e                  
    └─container-home 412.4G             brw-rw---- ext4                 ebcaa4b8-e003-4189-9f18-8ba551378220 
[manjaro@manjaro ~]$ vgdisplay 
  --- Volume group ---
  VG Name               container
  System ID             
  Format                lvm2
  Metadata Areas        1
  Metadata Sequence No  4
  VG Access             read/write
  VG Status             resizable
  MAX LV                0
  Cur LV                3
  Open LV               0
  Max PV                0
  Cur PV                1
  Act PV                1
  VG Size               476.39 GiB
  PE Size               4.00 MiB
  Total PE              121957
  Alloc PE / Size       121957 / 476.39 GiB
  Free  PE / Size       0 / 0   
  VG UUID               xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb
[manjaro@manjaro ~]$ lvdisplay 
  --- Logical volume ---
  LV Path                /dev/container/swap
  LV Name                swap
  VG Name                container
  LV UUID                9FLdVV-97up-BP5i-zR24-FGIN-n836-gYkLU0
  LV Write Access        read/write
  LV Creation host, time manjaro, 2018-12-26 17:23:43 +0000
  LV Status              available
  # open                 0
  LV Size                32.00 GiB
  Current LE             8192
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           254:1
   
  --- Logical volume ---
  LV Path                /dev/container/root
  LV Name                root
  VG Name                container
  LV UUID                Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg
  LV Write Access        read/write
  LV Creation host, time manjaro, 2018-12-26 17:23:55 +0000
  LV Status              available
  # open                 0
  LV Size                32.00 GiB
  Current LE             8192
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           254:2
   
  --- Logical volume ---
  LV Path                /dev/container/home
  LV Name                home
  VG Name                container
  LV UUID                udHuJq-IcsV-okcC-nlwS-ASEu-Pc06-2VuqJe
  LV Write Access        read/write
  LV Creation host, time manjaro, 2018-12-26 17:25:06 +0000
  LV Status              available
  # open                 0
  LV Size                412.39 GiB
  Current LE             105573
  Segments               1
  Allocation             inherit
  Read ahead sectors     auto
  - currently set to     256
  Block device           254:3
[manjaro@manjaro ~]$ pvdisplay 
  /dev/sdb: open failed: No medium found
  --- Physical volume ---
  PV Name               /dev/mapper/cryptlvm
  VG Name               container
  PV Size               <476.40 GiB / not usable 4.00 MiB
  Allocatable           yes (but full)
  PE Size               4.00 MiB
  Total PE              121957
  Free PE               0
  Allocated PE          121957
  PV UUID               tQUGMp-1UBD-OEZA-4YWv-7iPc-nTKu-C7QL5B
[manjaro@manjaro mnt]$ cat etc/mkinitcpio.conf 
# vim:set ft=sh
# MODULES
# The following modules are loaded before any boot hooks are
# run.  Advanced users may wish to specify all system modules
# in this array.  For instance:
#     MODULES=(piix ide_disk reiserfs)
MODULES=""

# BINARIES
# This setting includes any additional binaries a given user may
# wish into the CPIO image.  This is run last, so it may be used to
# override the actual binaries included by a given hook
# BINARIES are dependency parsed, so you may safely ignore libraries
BINARIES=()

# FILES
# This setting is similar to BINARIES above, however, files are added
# as-is and are not parsed in any way.  This is useful for config files.
FILES=""

# HOOKS
# This is the most important setting in this file.  The HOOKS control the
# modules and scripts added to the image, and what happens at boot time.
# Order is important, and it is recommended that you do not change the
# order in which HOOKS are added.  Run 'mkinitcpio -H <hook name>' for
# help on a given hook.
# 'base' is _required_ unless you know precisely what you are doing.
# 'udev' is _required_ in order to automatically load modules
# 'filesystems' is _required_ unless you specify your fs modules in MODULES
# Examples:
##   This setup specifies all modules in the MODULES setting above.
##   No raid, lvm2, or encrypted root is needed.
#    HOOKS=(base)
#
##   This setup will autodetect all modules for your system and should
##   work as a sane default
#    HOOKS=(base udev autodetect block filesystems)
#
##   This setup will generate a 'full' image which supports most systems.
##   No autodetection is done.
#    HOOKS=(base udev block filesystems)
#
##   This setup assembles a pata mdadm array with an encrypted root FS.
##   Note: See 'mkinitcpio -H mdadm' for more information on raid devices.
#    HOOKS=(base udev block mdadm encrypt filesystems)
#
##   This setup loads an lvm2 volume group on a usb device.
#    HOOKS=(base udev block lvm2 filesystems)
#
##   NOTE: If you have /usr on a separate partition, you MUST include the
#    usr, fsck and shutdown hooks.
HOOKS="base udev autodetect modconf block keyboard keymap encrypt lvm2 resume filesystems"

# COMPRESSION
# Use this to compress the initramfs image. By default, gzip compression
# is used. Use 'cat' to create an uncompressed image.
#COMPRESSION="gzip"
#COMPRESSION="bzip2"
#COMPRESSION="lzma"
#COMPRESSION="xz"
#COMPRESSION="lzop"
#COMPRESSION="lz4"

# COMPRESSION_OPTIONS
# Additional options for the compressor
#COMPRESSION_OPTIONS=()
[manjaro@manjaro mnt]$ cat etc/default/grub 
GRUB_DEFAULT=saved
GRUB_TIMEOUT=5
GRUB_TIMEOUT_STYLE=menu
GRUB_DISTRIBUTOR='Manjaro'
GRUB_CMDLINE_LINUX_DEFAULT="quiet resume=UUID=5f639cb3-f741-4e82-b804-10430e8c208e"
GRUB_CMDLINE_LINUX="cryptdevice=UUID=2140c3d4-90a1-4ac4-ae65-381c34002177:cryptlvm root=/dev/container/root"

# If you want to enable the save default function, uncomment the following
# line, and set GRUB_DEFAULT to saved.
GRUB_SAVEDEFAULT=true

# Preload both GPT and MBR modules so that they are not missed
GRUB_PRELOAD_MODULES="part_gpt part_msdos"

# Uncomment to enable booting from LUKS encrypted devices
#GRUB_ENABLE_CRYPTODISK=y

# Uncomment to use basic console
GRUB_TERMINAL_INPUT=console

# Uncomment to disable graphical terminal
#GRUB_TERMINAL_OUTPUT=console

# The resolution used on graphical terminal
# note that you can use only modes which your graphic card supports via VBE
# you can see them in real GRUB with the command 'videoinfo'
GRUB_GFXMODE=auto

# Uncomment to allow the kernel use the same resolution used by grub
GRUB_GFXPAYLOAD_LINUX=keep

# Uncomment if you want GRUB to pass to the Linux kernel the old parameter
# format "root=/dev/xxx" instead of "root=/dev/disk/by-uuid/xxx"
#GRUB_DISABLE_LINUX_UUID=true

# Uncomment to disable generation of recovery mode menu entries
GRUB_DISABLE_RECOVERY=true

# Uncomment and set to the desired menu colors.  Used by normal and wallpaper
# modes only.  Entries specified as foreground/background.
GRUB_COLOR_NORMAL="light-gray/black"
GRUB_COLOR_HIGHLIGHT="green/black"

# Uncomment one of them for the gfx desired, a image background or a gfxtheme
#GRUB_BACKGROUND="/usr/share/grub/background.png"
GRUB_THEME="/usr/share/grub/themes/manjaro/theme.txt"

# Uncomment to get a beep at GRUB start
#GRUB_INIT_TUNE="480 440 1"
[manjaro@manjaro mnt]$ cat boot/grub/grub.cfg 
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
insmod part_gpt
insmod part_msdos
if [ -s $prefix/grubenv ]; then
  load_env
fi
if [ "${next_entry}" ] ; then
   set default="${next_entry}"
   set next_entry=
   save_env next_entry
   set boot_once=true
else
   set default="${saved_entry}"
fi

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then
  set saved_entry="${prev_saved_entry}"
  save_env saved_entry
  set prev_saved_entry=
  save_env prev_saved_entry
  set boot_once=true
fi

function savedefault {
  if [ -z "${boot_once}" ]; then
    saved_entry="${chosen}"
    save_env saved_entry
  fi
}

function load_video {
  if [ x$feature_all_video_module = xy ]; then
    insmod all_video
  else
    insmod efi_gop
    insmod efi_uga
    insmod ieee1275_fb
    insmod vbe
    insmod vga
    insmod video_bochs
    insmod video_cirrus
  fi
}

set menu_color_normal=light-gray/black
set menu_color_highlight=green/black

if [ x$feature_default_font_path = xy ] ; then
   font=unicode
else
insmod lvm
insmod ext2
set root='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'  722e9a90-33ed-422f-9ccb-0bab78b3713e
else
  search --no-floppy --fs-uuid --set=root 722e9a90-33ed-422f-9ccb-0bab78b3713e
fi
    font="/usr/share/grub/unicode.pf2"
fi

if loadfont $font ; then
  set gfxmode=auto
  load_video
  insmod gfxterm
  set locale_dir=$prefix/locale
  set lang=en_US
  insmod gettext
fi
terminal_input console
terminal_output gfxterm
insmod lvm
insmod ext2
set root='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'  722e9a90-33ed-422f-9ccb-0bab78b3713e
else
  search --no-floppy --fs-uuid --set=root 722e9a90-33ed-422f-9ccb-0bab78b3713e
fi
insmod gfxmenu
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_12.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_14.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_16.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_24.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_48.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_bold_16.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/dejavu_sans_mono_12.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-12.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-14.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-16.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-18.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-b12.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-b14.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-b16.pf2
loadfont ($root)/usr/share/grub/themes/manjaro/terminus-b18.pf2
insmod png
set theme=($root)/usr/share/grub/themes/manjaro/theme.txt
export theme
if [ x$feature_timeout_style = xy ] ; then
  set timeout_style=menu
  set timeout=5
# Fallback normal timeout code in case the timeout_style feature is
# unavailable.
else
  set timeout=5
fi
### END /etc/grub.d/00_header ###

### BEGIN /etc/grub.d/01_menu_auto_hide ###
if [ "${boot_success}" = "1" -o "${boot_indeterminate}" = "1" ]; then
  set last_boot_ok=1
else
  set last_boot_ok=0
fi

# Reset boot_indeterminate after a successful boot
if [ "${boot_success}" = "1" ] ; then
  set boot_indeterminate=0
# Avoid boot_indeterminate causing the menu to be hidden more then once
elif [ "${boot_indeterminate}" = "1" ]; then
  set boot_indeterminate=2
fi
set boot_success=0
save_env boot_success boot_indeterminate

if [ x$feature_timeout_style = xy ] ; then
  if [ "${menu_show_once}" ]; then
    unset menu_show_once
    save_env menu_show_once
    set timeout_style=menu
    set timeout=60
  elif [ "${menu_auto_hide}" -a "${last_boot_ok}" = "1" ]; then
    set orig_timeout_style=${timeout_style}
    set orig_timeout=${timeout}
    if [ "${fastboot}" = "1" ]; then
      # timeout_style=menu + timeout=0 avoids the countdown code keypress check
      set timeout_style=menu
      set timeout=0
    else
      set timeout_style=hidden
      set timeout=1
    fi
  fi
fi
### END /etc/grub.d/01_menu_auto_hide ###

### BEGIN /etc/grub.d/10_linux ###
menuentry 'Manjaro Linux' --class manjaro --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-722e9a90-33ed-422f-9ccb-0bab78b3713e' {
	savedefault
	load_video
	set gfxpayload=keep
	insmod gzio
	insmod lvm
	insmod ext2
	set root='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root --hint='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'  722e9a90-33ed-422f-9ccb-0bab78b3713e
	else
	  search --no-floppy --fs-uuid --set=root 722e9a90-33ed-422f-9ccb-0bab78b3713e
	fi
	linux	/boot/vmlinuz-4.19-x86_64 root=/dev/mapper/container-root rw cryptdevice=UUID=2140c3d4-90a1-4ac4-ae65-381c34002177:cryptlvm root=/dev/container/root quiet resume=UUID=5f639cb3-f741-4e82-b804-10430e8c208e
	initrd	/boot/intel-ucode.img /boot/initramfs-4.19-x86_64.img
}
submenu 'Advanced options for Manjaro Linux' $menuentry_id_option 'gnulinux-advanced-722e9a90-33ed-422f-9ccb-0bab78b3713e' {
	menuentry 'Manjaro Linux (Kernel: 4.19.12-1-MANJARO x64)' --class manjaro --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-4.19.12-1-MANJARO x64-advanced-722e9a90-33ed-422f-9ccb-0bab78b3713e' {
	savedefault
		load_video
		set gfxpayload=keep
		insmod gzio
		insmod lvm
		insmod ext2
		set root='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'  722e9a90-33ed-422f-9ccb-0bab78b3713e
		else
		  search --no-floppy --fs-uuid --set=root 722e9a90-33ed-422f-9ccb-0bab78b3713e
		fi
		linux	/boot/vmlinuz-4.19-x86_64 root=/dev/mapper/container-root rw cryptdevice=UUID=2140c3d4-90a1-4ac4-ae65-381c34002177:cryptlvm root=/dev/container/root quiet resume=UUID=5f639cb3-f741-4e82-b804-10430e8c208e
		initrd	/boot/intel-ucode.img /boot/initramfs-4.19-x86_64.img
	}
	menuentry 'Manjaro Linux (Kernel: 4.19.12-1-MANJARO x64 - fallback initramfs)' --class manjaro --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-4.19.12-1-MANJARO x64-fallback-722e9a90-33ed-422f-9ccb-0bab78b3713e' {
		load_video
		set gfxpayload=keep
		insmod gzio
		insmod lvm
		insmod ext2
		set root='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root --hint='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'  722e9a90-33ed-422f-9ccb-0bab78b3713e
		else
		  search --no-floppy --fs-uuid --set=root 722e9a90-33ed-422f-9ccb-0bab78b3713e
		fi
		linux	/boot/vmlinuz-4.19-x86_64 root=/dev/mapper/container-root rw cryptdevice=UUID=2140c3d4-90a1-4ac4-ae65-381c34002177:cryptlvm root=/dev/container/root quiet resume=UUID=5f639cb3-f741-4e82-b804-10430e8c208e
		initrd	/boot/initramfs-4.19-x86_64-fallback.img
	}
}

### END /etc/grub.d/10_linux ###

### BEGIN /etc/grub.d/20_linux_xen ###
### END /etc/grub.d/20_linux_xen ###

### BEGIN /etc/grub.d/30_os-prober ###
### END /etc/grub.d/30_os-prober ###

### BEGIN /etc/grub.d/40_custom ###
# This file provides an easy way to add custom menu entries.  Simply type the
# menu entries you want to add after this comment.  Be careful not to change
# the 'exec tail' line above.
### END /etc/grub.d/40_custom ###

### BEGIN /etc/grub.d/41_custom ###
if [ -f  ${config_directory}/custom.cfg ]; then
  source ${config_directory}/custom.cfg
elif [ -z "${config_directory}" -a -f  $prefix/custom.cfg ]; then
  source $prefix/custom.cfg;
fi
### END /etc/grub.d/41_custom ###

### BEGIN /etc/grub.d/60_memtest86+ ###
if [ "${grub_platform}" == "pc" ]; then
    menuentry "Memory Tester (memtest86+)" --class memtest86 --class gnu --class tool {
        search --fs-uuid --no-floppy --set=root --hint='lvmid/xjugbM-YyVj-k5V4-dOXu-HJpW-aT4s-OpOBhb/Tz5edH-L0sJ-SQsj-pkQc-nbJP-FRDK-eVlZRg'  722e9a90-33ed-422f-9ccb-0bab78b3713e
        linux16 /boot/memtest86+/memtest.bin 
    }
fi
### END /etc/grub.d/60_memtest86+ ###

It looks like Grub does not find your Boot partition. What is your Boot partition?

I believe you need a unencrypted Boot partition for "LVM on LUKS" unless you use "GRUB_ENABLE_CRYPTODISK=y". You can find it under "variants of this setup" with some links to other tutorials.

My boot partition is /dev/nvme0n1p1, and I believe it is not encrypted. My disk layout is (or should be):

+-----------------------------------------------------------------------+ +----------------+
| Logical volume 1      | Logical volume 2      | Logical volume 3      | | Boot partition |
|                       |                       |                       | |                |
| [SWAP]                | /                     | /home                 | | /boot/efi      |
|                       |                       |                       | |                |
| /dev/container/swap   | /dev/container/root   | /dev/container/home   | |                |
|_ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _| |                |
|                                                                       | |                |
|                         LUKS2 encrypted partition                     | |                |
|                           /dev/nvme0n1p2                              | | /dev/nvme0n1p1 |
+-----------------------------------------------------------------------+ +----------------+

This is your efi partition - not your boot partition. That said, your efi and boot partition can be the same, but it needs to be mounted as /boot not as /boot/efi

Personally, I would not use my efi partition as boot, but that is your choice.

Your comment made me realized I had things confused. I did not specify a boot partition during the installation, so it must have installed GRUB on the encrypted volume. But I had not set "GRUB_ENABLE_CRYPTODISK=y" so it could not work.

So I've made a new disk setup with 2 unencrypted partitions: /boot and /boot/efi. This time, it's a bit different. During the boot, I got this:

error: no such device: 4f528ecb-...
error: disk 'lvmid/q1B7pZ-.../qRdnNZ-...' not found.
error: disk 'lvmid/q1B7pZ-.../qRdnNZ-...' not found.
error: disk 'lvmid/q1B7pZ-.../qRdnNZ-...' not found.
...

Press any key to continue...

After pressing a key, I reach grub where I see Manjaro. If I try to load it, I have a different error:

ERROR: resume: hibernation device 'UUID=...' not found
mount: /new_root: can’t find 'UUID=...'.

It still loks like Grub does not set his own root correctly. How do you install Grub and configure it.

Did you tried the simple encrypt Option in the GUI installer? It might be a lot easier.

If you can reach grub, you can search for partitions. On normal HD's you would use set root='hd0,gpt1' But I don't know the syntax for nvme devices.

I let the GUI installer set up Grub. After its installation, I mounted the partitions (/boot, /boot/efi, /, and /home), chroot, and grub-mkconfig -o /boot/grub/grub.etc.

I did not see any simple encrypt Option in the GUI installer, at what step should it be available?
By GUI installer do you mean Manjaro Architect or the Installer based on Calamares?

Did you reinstall grub from the command line after creating the new boot partitions? I have had issues using the GUI grub customizer and find I can more easily find resolution by using the CLI.

After you mount your partitions do you reinstall grub and update?

This might help to configure grub fresh.

Any time I make a change to my partitions or anything I run these then use the grub customizer to ensure all menus are in the order I want them:

grub-install /dev/XXX

grub-install /dev/XXX

update-grub

The link above provides instruction for UEFI as well.

I did not reinstall grub, I only updated the config. I will try to reinstall Grub and keep you posted.

1 Like

By GUI, I meant Calamares. The "Partitions" step in Calamares has a small checkbox to enable "Encrypt System" . It is not available if you use "Manual partitioning" .

1 Like

So, reinstalling Grub with my previous layout did not work. Reinstalling and letting the installer encrypt my disk worked.

However I have another problem now. After entering my passphrase, sometimes it boots correctly but sometimes it fails:

mount: /openswap_keymount: no filesystem type specified.
Device /dev/disk/by-uuid/... doesn't exist or access denied.
...

And I am being dropped into an emergency shell. There, if I list the partitions by label, I only see the partitions on my second SSD, the one on which Windows is installed. I have a separate post about the fact that I randomly see one of the 2 SSD. I think this is linked.

Dual booting Manjaro with Windows presents some unique problems from what I have read. Unfortunately I have no experience with this because Manjaro replaced the resident Windows OS on my laptop. Prior to removing I did consider dual-booting.

This post might clear some things up or at the very least guide you through a full install from scratch that should boot and load with the encryption you would like to have.

This might help as well. Sorry for multiple responses but now you've got me curious and searching for answers :wink:

Last link I promise. Hopefully one of these helps lead you to the answer if it doesn't solve it

Sometimes nvme drives (on Lenovo..) have this problem to not being recognized.
Is one of them Samsung?
So here are my links :rofl:

https://wiki.archlinux.org/index.php/Solid_state_drive/NVMe

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.

Forum kindly sponsored by