I was able to get encrypted /boot working by partitioning (ESP partition, crypt partition ( LVM ( root, home, swap ) ) ). When the grub install failed, switch to "execute shell", and: $ cd /target/etc/default $ echo 'GRUB_ENABLE_CRYPTODISK=y' >> grub $ exit Then re-execute the grub install. Install completed. Got EFI password prompt, grub, kernel password prompt, 'login:'. -- -Justin JustinVallon@gmail.com