Thomas Schneider - 2023-10-29

Hello,
I have a standard dualboot setup installed in BIOS/MBR mode:

sda             8
├─sda1          8:1    0   1,2G  0 part  SYSTEM_DRV
├─sda2          8:2    0 136,1G  0 part  Windows10_OS
└─sda3          8:3    0    95G  0 part  
  └─cryptroot 253:0    0    95G  0 crypt /

Partition sda3 is encrypted with LUKS and includes boot directory (with Linux kernel files and grub.cfg.
Using latest Grub2 includes the following features:

  • No dedicated boot Partition required
  • supports booting bootmgr directly and chainloading of partition boot sector is no longer required (to boot Windows in a BIOS/MBR setup)

The main question is:
Which bootloader must be installed in MBR? Veracrypt bootloader or Grub2?

I prefer Grub2 for the reason of it's features mentioned before.
This means Grub2 can boot directly from system partition that has /bootmgr.

But how can I boot an encrypted system partition (sda2, Windows10_OS) with VeraCrypt?
Would it make sense to put VeraCrypt bootloader to sda1, SYSTEM_DRV?

THX