Grub with cryptsetup luksFormat

[pulsar sky]

grub can't handle luks2 without patches

unless you use pbkdf which is weaker

so it's generally best to have an unencrypted ESP

if you're concerned with authenticity, then you can use secure boot

[noble quail]

Oh, I want only to encrypt the root itself, not the esp

I was using it without knowing

Grub throws because I was without it

I just created a /efi when preparing disk

is this the problem?

[charred trail]

That's not the point, grub has to be able to read the partition the kernel etc is on. Which is usually not the ESP

[noble quail]

I got it, so what can I do?

[noble quail]

If I make a /boot and /efi while preparing disk, I'll be able to use it correctly, right?