Understand GRUB encryption in LINUX boot loader

GRUB encryption is a common task in LINUX. But today I checked this on the internet and found that many people wrote it very easily, and the methods were outdated. So here I will update the GRUB encryption knowledge. Share with you.

GRUB is to configure the/boot/grub. conf file.

First, let's talk about the benefits of GRUB encryption.

1. users who do not know the password cannot start the system.

2. prevent others from modifying startup parameters.

GRUB encryption is divided into two types.

1. Global Encryption

2. Partial Encryption

Global encryption: the startup interface is locked and disabled.
 

 
 


  
  
E to edit the commands before booting

  
  
A to modify the kernel arguments before booting

  
  
C for a command-line

 
 

The main function of GRUB to encrypt global encryption is edit the commands, because this superstep will see a local password.

Then let's take a look at the effect of GRUB encryption after the global password is added. He needs you to press P and enter the global password to edit and view commands. This will protect our local password. If you do not enter a global password, you can press enter to start the system. If you still have a local password, you need to enter a local password.

GRUB encryption local encryption: control the encryption against a specific hyper-system. Function: You must enter a password to access the system. We will learn about GRUB encryption and how to implement these functions in the future.