How do I switch the order of GRUB to before VeraCrypt on a BIOS system, such that Ubuntu is accessible again with full disc encryption?
The following was executed:
- Installed Windows 10 Pro N on a single disk
- Installed dual boot Ubuntu 20.04 on the same disk, which installs GRUB bootloader
- Installed VeraCrypt on Windows and performed complete system disk encryption
- Full disk encryption installs the VeraCrypt bootloader, which is placed in front of the GRUB bootloader on the Master Boot Record (MBR), meaning the GRUB bootloader towards Ubuntu is not available anymore/skipped. In the VeraCrypt bootloader one can either:
- Press ESC, which does not turn towards GRUB, indicating the Windows 10 install is corrupted since it's encrypted
- Enter password correctly, which directly skips the GRUB bootloader, successfully loading Windows 10 and resulting in Ubuntu 20.04 not being accessible/bootable anymore because the GRUB bootloader is skipped
- Full disk encryption installs the VeraCrypt bootloader, which is placed in front of the GRUB bootloader on the Master Boot Record (MBR), meaning the GRUB bootloader towards Ubuntu is not available anymore/skipped. In the VeraCrypt bootloader one can either:
- Tried switching the bootloader so the GRUB loader was above Veracrpyt with
bcdedit
:BcdEdit /enum Windows Boot Manager -------------------- identifier {bootmgr} device partition=\Device\HarddiskVolume1 description Windows Boot Manager locale en-US inherit {globalsettings} default {current} resumeobject {f1c50cdb-e01f-11ea-8662-d17332f8934a} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Windows Boot Loader ------------------- identifier {current} device partition=C: path \Windows\system32\winload.exe description Windows 10 locale en-US inherit {bootloadersettings} recoverysequence {f1c50cdd-e01f-11ea-8662-d17332f8934a} displaymessageoverride Recovery recoveryenabled Yes allowedinmemorysettings 0x15000075 osdevice partition=C: systemroot \Windows resumeobject {f1c50cdb-e01f-11ea-8662-d17332f8934a} nx OptIn bootmenupolicy Standard
- I have not yet identified whether the GRUB bootloader is in here, as I think
current
is the VeraCrypt bootloader that points towards the Windows bootloader with
I would think that if I can find the object ID of the GRUB boot loader, I could refer to that fromresumeobject {f1c50cdb-e01f-11ea-8662-d17332f8934a}
resumeobject
, or create a new GRUB boot loader entry to add in front ofcurrent
, but have not yet determined how to usebcdedit
to create a new entry, moving the GRUB boot loader to the front.
- I have not yet identified whether the GRUB bootloader is in here, as I think
BcdEdit
... Have you reviewed the GRUB and VeraCrypt man pages? You [likely] need to modify GRUB's config file via GRUB's CLI or text editor.