Contents
Should I use LUKS1 or LUKS2?
You should definitely use LUKS2 whenever possible. It is the newer header format and overcomes the limits of the (legacy) LUKS1 header. It is the default since cryptsetup version 2.1, but this alone doesn’t say much. The Password-Based Key Derivation Function (PBKDF) is the big change.
Can grub boot different disk?
Grub will allow you to then boot from any partition anywhere in your disk/partition collection. Essentially, the Grub Boot loader would be acting just like what the MBR does in then booting from an active partition.
Do you want to have all GRUB2 file removed from boot GRUB?
Re: Do you want to have all GRUB 2 files removed from /boot/grub? Yes. For some reason Mint is listed there too, but I never finished the install.
Can you use GRUB as a bootloader for LUKS2?
GRUB does not support LUKS2 yet. If your /boot directory is on a LUKS-encrypted device and you use GRUB as your bootloader, it won’t work. [minor point] Older cryptsetup (1.x.y) can’t process LUKS2, so Live CD/USBs with a version of cryptsetup before 2 can’t be used to decrypt LUKS2 partitions.
Can you use GRUB on a Luks partition?
As of January 10th 2020, GRUB supports LUKS2 so if you are using GRUB to unlock the /boot partition or encrypted disk – GRUB has you covered. As for features see Leo’s answer GRUB does not support LUKS2 yet. If your /boot directory is on a LUKS-encrypted device and you use GRUB as your bootloader, it won’t work.
Is the luks1 format compatible with LUKS2?
Cryptsetup 2.0.0 Release Notes Stable release with experimental features. This version introduces a new on-disk LUKS2 format. The legacy LUKS (referenced as LUKS1) will be fully supported forever as well as a traditional and fully backward compatible format.
Why do I use LUKS2 instead of PBKDF2?
For Argon2i/id, there is also memory cost (memory required during the process of key derivation) and parallel cost (number of threads that run in parallel during the key derivation). Since cryptsetup 2.1 defaults to the bigger LUKS2 header, it also seems to default to Argon2i instead of PBKDF2.