http://bugzilla.opensuse.org/show_bug.cgi?id=968185 http://bugzilla.opensuse.org/show_bug.cgi?id=968185#c2 Neil Rickert changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nwr10cst-oslnx@yahoo.com --- Comment #2 from Neil Rickert --- I agree with Jiri. But I'll add a few comments. The first password request is by grub2-efi, so that it can locate its boot menu and associated files. The second password request is by the kernel (as communicated through systemd/plymouth. The kernel cannot make do with access via grub2-efi as that depends on the firmware. The kernel needs to know the key (password) separately. As far as I know, there isn't an interface where grub2 could communicate the key to the kernel. Yes, it could put that on the kernel command line, but then the key would be visible to uses via "/proc". So any change would require a new way of passing information from grub2 to the kernel. And that might open security flaws. I would rather that it be left as is. I am booting Tumbleweed that way (and needing to enter twice). But I usually prefer to setup a separate unencrypted "/boot". I'm told that the ability to boot from a "btrfs" snapshot requires that "/boot" be part of the root file system and not a separate partition. There is another alternative. If you installed for secure-boot (even if disabled), then booting uses "/boot/efi/EFI/opensuse/grub.cfg" as the initial step of booting. You could copy the kernel and "initrd" to "/boot/efi/EFI/opensuse", and modify that "grub.cfg" to handle the full booting. Then you could manage without the first password request. Note that I have not tested this method. However, this could be a maintenance headache. For every kernel update and every grub2 update, you would have to redo those changes. And the result would boot you straight into opensuse without a boot menu. Personally, I think it better to live with needing to enter the key twice. -- You are receiving this mail because: You are on the CC list for the bug.