From c25a21502c48a08928bedbdbda29a4a4d1a4cae7 Mon Sep 17 00:00:00 2001
From: Damon Breeden <damon.breeden@ahrefs.com>
Date: Fri, 6 Jun 2025 21:19:34 +0000
Subject: [PATCH] debootstrap: configure: fix grub

idk how it worked before but current installs with grub seem to require this
---
 tasks/configure.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tasks/configure.yml b/tasks/configure.yml
index e985cef..973622d 100644
--- a/tasks/configure.yml
+++ b/tasks/configure.yml
@@ -49,6 +49,12 @@
     content: "export CRYPTSETUP=y"
   when: _luksopen is defined and _luksopen.changed
 
+- name: enforce cryptsetup in grub
+  copy:
+    dest: "{{ _tgt_root }}/etc/default/grub.d/cryptodisk.cfg"
+    content: "GRUB_ENABLE_CRYPTODISK=y"
+  when: _luksopen is defined and _luksopen.changed
+
 - name: update initramfs
   command: chroot {{ _tgt_root }} update-initramfs -u -k all