Description
Encrypted LUKS and DMCrypt boot setups can use GRUB 2 extensions for detached headers and key files. It is useful for advanced encrypted-disk configurations that the standard bootloader package may not cover.
Bootloader changes can make a machine fail to start if the wrong disk, firmware mode, or configuration is used. Keep recovery media available and review generated entries before rebooting.