[fernovus]

Grub doesn't support LUKS2 encrypting the boot partition with Grub config files inside, but it can decrypt a LUKS2 root partition

[saladuh]

I thought grub2 does support this now?

[beermonster]

LUKS2 is supported with some know limitations [0]

Argon2id (cryptsetup default) and Argon2i PBKDFs are not supported, only PBKDF2 is.

grub-install does not support creating a core image that could be used for unlocking LUKS2.

[0] https://wiki.archlinux.org/title/GRUB#LUKS2