Help repairing GRUB on LUKS-encrypted volume

Hello!

I’m new to Linux and have been dual-booting using two separate drives; one using a LUKS-encrypted Kubuntu 25.10 (I’ve got the password) and another using Windows 10.

However, last week when I tried booting to my Kubuntu drive, my PC instead booted straight into Windows 10 and continues to do so.
Normally, it would boot into the GRUB menu where I can select between the two systems, which leads me to believe that GRUB has been destroyed, since unlocking the drive from a live USB shows an empty GRUB folder in root.
My Kubuntu install has two partitions: sdb1 (ext4, kubuntu_boot), sdb2 (luks2, root).

I’ve tried changing the boot order in my BIOS, as well as unplugging the Windows drive, but when I do this, my PC finds no bootable drive.

If it’s not possible to repair GRUB while keeping the files on the drive, is it possible to backup root to an NFTS-formatted HDD using the live USB environment, and then restoring root after reinstalling?

What should I do?
Thank you!

Hi and welcome! Since this is your first post, glad to have you here :slightly_smiling_face:

From what you describe, it does sound like the EFI/GRUB bootloader on the Kubuntu drive is missing or no longer registered with the firmware, rather than your encrypted system being lost.

A few quick points that may help:

  • On UEFI systems, GRUB is usually stored on the EFI System Partition (ESP), not inside the LUKS root. If the ESP was deleted, formatted, or the EFI entry removed, the system will boot straight to Windows.
  • Even with LUKS, GRUB can usually be repaired from a live USB using tools like boot-repair, or by manually reinstalling GRUB after unlocking the encrypted volume.
  • If repair fails, yes — you can mount the LUKS volume from a live session, then copy your /home and other important data to an NTFS-formatted external drive before reinstalling Kubuntu.

I’d suggest first confirming:

  • Whether an EFI System Partition still exists on the Kubuntu disk
  • Whether the LUKS volume unlocks and your data is intact

Once that’s confirmed, repairing GRUB is often possible without reinstalling. If you share whether your system is UEFI or Legacy (BIOS) and the output of lsblk from the live USB, others here can give more precise steps.

Good luck — and don’t worry, this is usually recoverable :+1:

1 Like

Lets see details on your configuration. Please copy & paste the pastebin link to the BootInfo summary report ( do not post report), do not run the auto fix till reviewed.
Use often updated ppa version with your USB installer or any working install over somewhat older ISO or run update in ISO to make it current.
https://help.ubuntu.com/community/Boot-Repair &
https://sourceforge.net/p/boot-repair/home/Home/

Besure to decrypt the LUKS volume before running Boot-Repair’s report or make any repairs. It has to see the install inside the volumes.

You can backup data to NTFS, not really recommended. Better to use ext4. NTFS does not support Linux ownership & permissions & you lose those. About impossible to restore for / (root) as many different ownerships & permissions. But data really only has you & one set of permissions and can be manually reset.

1 Like

Posting the link to the boot repair output is your best possibility to get help. If you only have 2 partitions (boot and the / encrypted filesystem) then you probably have the Kubuntu EFI files on the windows disk, if it is an EFI install which you don’t mention. Did you select the Kubuntu drive in the BIOS?

1 Like

It looks like there’s no mount point on the sdb1 partition on the device /dev/sdb, which is the drive Kubuntu is installed to. I assume this is the EFI partition you’re talking about?
I am also able to unlock the LUKS-encrypted root partition, with files that are intact.

Here’s a few screenshots of /dev/sdb from the KDE Partition Manager:

My system is UEFI, and here’s the output of lsblk from the live USB:

kubuntu@kubuntu:~$ lsblk
NAME                                          MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
loop0                                           7:0    0     4G  1 loop  /rofs
loop1                                           7:1    0 516.2M  1 loop  /snap/gnome-42-2204/226
loop2                                           7:2    0 247.6M  1 loop  /snap/firefox/6966
loop3                                           7:3    0  73.9M  1 loop  /snap/core22/2133
loop4                                           7:4    0     4K  1 loop  /snap/bare/5
loop5                                           7:5    0  91.7M  1 loop  /snap/gtk-common-themes/1535
loop6                                           7:6    0   264K  1 loop  /snap/gtk-theme-breeze/5
loop7                                           7:7    0  13.2M  1 loop  /snap/icon-theme-breeze/5
loop8                                           7:8    0  50.8M  1 loop  /snap/snapd/25202
loop9                                           7:9    0 226.2M  1 loop  /snap/thunderbird/812
loop10                                          7:10   0    74M  1 loop  /snap/core22/2193
loop11                                          7:11   0  50.9M  1 loop  /snap/snapd/25577
loop12                                          7:12   0 250.8M  1 loop  /snap/firefox/7559
loop13                                          7:13   0 226.4M  1 loop  /snap/thunderbird/919
sda                                             8:0    0 465.8G  0 disk  
└─sda1                                          8:1    0 465.8G  0 part  
sdb                                             8:16   0 931.5G  0 disk  
├─sdb1                                          8:17   0     4G  0 part  
└─sdb2                                          8:18   0 927.5G  0 part  
  └─luks-1e81afe5-b2da-43da-b27b-b85d1f0b15b4 252:2    0 927.5G  0 crypt /media/kubuntu/kubuntu_2510
sdc                                             8:32   0 465.8G  0 disk  
├─sdc1                                          8:33   0   300M  0 part  
└─sdc2                                          8:34   0 465.2G  0 part  
sdd                                             8:48   0   3.6T  0 disk  
├─sdd1                                          8:49   0    16M  0 part  
└─sdd2                                          8:50   0   3.6T  0 part  /media/kubuntu/4TB Internal Backup HDD
sde                                             8:64   1    58G  0 disk  
├─sde1                                          8:65   1  57.9G  0 part  
│ ├─ventoy                                    252:0    0   4.6G  1 dm    /cdrom
│ └─sde1                                      252:1    0  57.9G  0 dm    
└─sde2                                          8:66   1    32M  0 part  
sdf                                             8:80   1     0B  0 disk  
sr0                                            11:0    1  1024M  0 rom   
kubuntu@kubuntu:~$ 

I tried installing Boot-Repair, but I get this error-message at the end:

kubuntu@kubuntu:~$ sudo apt install -y wget;
Error: dpkg was interrupted, you must manually run 'sudo dpkg --configure -a' to correct the problem. 
kubuntu@kubuntu:~$ sudo dpkg --configure -a
Setting up ubuntu-drivers-common (1:0.10.3.1) ...
Setting up libreoffice-draw (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up cups-bsd (2.4.12-0ubuntu3.5) ...
Setting up libdrm-radeon1:amd64 (2.4.125-1ubuntu0.1) ...
Setting up libdrm-intel1:amd64 (2.4.125-1ubuntu0.1) ...
Setting up xserver-xorg-core (2:21.1.18-1ubuntu1.1) ...
Setting up libreoffice-kf6 (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up samba-libs:amd64 (2:4.22.3+dfsg-4ubuntu2.2) ...
Setting up network-manager (1.52.0-1ubuntu3.1) ...
Setting up linux-headers-generic (6.17.0-8.8) ...
Setting up libavutil59:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up cups-filters-core-drivers (2.0.1-0ubuntu3.25.10.1) ...
Setting up libpostproc58:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up libswresample5:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up libswscale8:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up python3-ldb (2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2) ...
Setting up libavcodec61:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up libreoffice-impress (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up samba-common-bin (2:4.22.3+dfsg-4ubuntu2.2) ...
Setting up linux-tools-6.17.0-8-generic (6.17.0-8.8) ...
Setting up libreoffice-base-core (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up cups-filters (2.0.1-0ubuntu3.25.10.1) ...
Setting up python3-uno (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up libsmbclient0:amd64 (2:4.22.3+dfsg-4ubuntu2.2) ...
Setting up python3-samba (2:4.22.3+dfsg-4ubuntu2.2) ...
Setting up libreoffice-calc (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up cups-core-drivers (2.4.12-0ubuntu3.5) ...
Setting up libreoffice-writer (4:25.8.3-0ubuntu0.25.10.1) ...
Setting up linux-generic (6.17.0-8.8) ...
Setting up cups (2.4.12-0ubuntu3.5) ...
Updating PPD files for cups ...
Updating PPD files for cups-filters ...
Updating PPD files for foomatic-db-compressed-ppds ...
Updating PPD files for openprinting-ppds ...
Updating PPD files for brlaser ...
Updating PPD files for c2esp ...
Updating PPD files for foo2zjs-common ...
Updating PPD files for gutenprint ...
Updating PPD files for hpcups ...
Updating PPD files for m2300w ...
Updating PPD files for postscript-hp ...
Updating PPD files for ptouch ...
Updating PPD files for pxljr ...
Updating PPD files for sag-gdi ...
Updating PPD files for splix ...
Setting up xserver-xorg-video-amdgpu (23.0.0-1ubuntu0.25.10.1) ...
Setting up libavformat61:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up libavfilter10:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up smbclient (2:4.22.3+dfsg-4ubuntu2.2) ...
Setting up bluez-cups (5.83-1~exp1ubuntu0.1) ...
Setting up libavdevice61:amd64 (7:7.1.1-1ubuntu4.1) ...
Setting up ffmpeg (7:7.1.1-1ubuntu4.1) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for libc-bin (2.42-0ubuntu3) ...
Processing triggers for ufw (0.36.2-9) ...
Processing triggers for systemd (257.9-0ubuntu2) ...
Processing triggers for man-db (2.13.1-1) ...
Processing triggers for linux-image-6.17.0-8-generic (6.17.0-8.8) ...
Processing triggers for libreoffice-common (4:25.8.3-0ubuntu0.25.10.1) ...
Processing triggers for dbus (1.16.2-2ubuntu2) ...
Processing triggers for shared-mime-info (2.4-5build2) ...
Processing triggers for procps (2:4.0.4-8ubuntu3) ...
Processing triggers for fontconfig (2.15.0-2.3ubuntu1) ...
kubuntu@kubuntu:~$ sudo apt install -y wget;
wget is already the newest version (1.25.0-2ubuntu3).
wget set to manually installed.
Summary:                    
  Upgrading: 0, Installing: 0, Removing: 0, Not Upgrading: 0
kubuntu@kubuntu:~$ wget -O- https://sourceforge.net/projects/boot-repair/files/key.gpg | sudo tee /etc/apt/keyrings/boot-repair.gpg;
--2025-12-30 12:42:33--  https://sourceforge.net/projects/boot-repair/files/key.gpg
Resolving sourceforge.net (sourceforge.net)... 104.18.13.149, 104.18.12.149, 2606:4700::6812:c95, ...
Connecting to sourceforge.net (sourceforge.net)|104.18.13.149|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://sourceforge.net/projects/boot-repair/files/key.gpg/ [following]
--2025-12-30 12:42:34--  https://sourceforge.net/projects/boot-repair/files/key.gpg/
Reusing existing connection to sourceforge.net:443.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://sourceforge.net/projects/boot-repair/files/key.gpg/download [following]
--2025-12-30 12:42:34--  https://sourceforge.net/projects/boot-repair/files/key.gpg/download
Reusing existing connection to sourceforge.net:443.
HTTP request sent, awaiting response... 302 Found
Location: https://downloads.sourceforge.net/project/boot-repair/key.gpg?ts=gAAAAABpU8i7tU5liv0eSax_MrU1NNIvUImDUpds56-tJ-zZmCvIfCMycFy48-yGhq7vVA9YFp84L2EiL1nezZizG-2FVURn9Q%3D%3D&use_mirror=deac-ams&r= [following]
--2025-12-30 12:42:35--  https://downloads.sourceforge.net/project/boot-repair/key.gpg?ts=gAAAAABpU8i7tU5liv0eSax_MrU1NNIvUImDUpds56-tJ-zZmCvIfCMycFy48-yGhq7vVA9YFp84L2EiL1nezZizG-2FVURn9Q%3D%3D&use_mirror=deac-ams&r=
Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:d95, ...
Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|104.18.12.149|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://deac-ams.dl.sourceforge.net/project/boot-repair/key.gpg?viasf=1 [following]
--2025-12-30 12:42:35--  https://deac-ams.dl.sourceforge.net/project/boot-repair/key.gpg?viasf=1
Resolving deac-ams.dl.sourceforge.net (deac-ams.dl.sourceforge.net)... 185.34.27.55
Connecting to deac-ams.dl.sourceforge.net (deac-ams.dl.sourceforge.net)|185.34.27.55|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 359 [application/octet-stream]
Saving to: ‘STDOUT’

-                            100%[==============================================>]     359  --.-KB/s    in 0s      

�Cc7W����߉�݅��;*▒�P�N����!����dz�.�X��
��1��
us����Launchpad PPA for YannUbuntu¸"M▒�NSB�$���G����3�
                                        


        ��`��
����gf�̥2t٧s�!1DtY�1
                   p�������k�\�6�F�=m��xll����C�g9х�ER��e����J����qz�����wi8���zɤ�s!��:?���ݮL��6��]����2025-12-30 12:42:36 (50.3 MB/s) - written to stdout [359/359]

kubuntu@kubuntu:~$ echo 'deb [signed-by=/etc/apt/keyrings/boot-repair.gpg] https://ppa.launchpadcontent.net/yannubuntu/boot-repair/ubuntu noble main' | sudo tee /etc/apt/sources.list.d/boot-repair.list;
deb [signed-by=/etc/apt/keyrings/boot-repair.gpg] https://ppa.launchpadcontent.net/yannubuntu/boot-repair/ubuntu noble main
kubuntu@kubuntu:~$ sudo apt update && sudo apt install -y boot-repair
Ign:1 cdrom://Kubuntu 25.10 _Questing Quokka_ - Release amd64 (20251007) questing InRelease
Hit:2 cdrom://Kubuntu 25.10 _Questing Quokka_ - Release amd64 (20251007) questing Release
Hit:4 http://security.ubuntu.com/ubuntu questing-security InRelease
Get:5 https://ppa.launchpadcontent.net/yannubuntu/boot-repair/ubuntu noble InRelease [18.1 kB]
Err:5 https://ppa.launchpadcontent.net/yannubuntu/boot-repair/ubuntu noble InRelease  
  The following signatures were invalid: 3C48D16124B50277AF10D27F32B18A1260D8DA0B (untrusted public key algorithm: rsa1024) The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 3E687364D2EDDB5F
Hit:6 http://archive.ubuntu.com/ubuntu questing InRelease
Hit:7 http://archive.ubuntu.com/ubuntu questing-updates InRelease
Warning: OpenPGP signature verification failed: https://ppa.launchpadcontent.net/yannubuntu/boot-repair/ubuntu noble InRelease: The following signatures were invalid: 3C48D16124B50277AF10D27F32B18A1260D8DA0B (untrusted public key algorithm: rsa1024) The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 3E687364D2EDDB5F
Error: The repository 'https://ppa.launchpadcontent.net/yannubuntu/boot-repair/ubuntu noble InRelease' is not signed.
Notice: Updating from such a repository can't be done securely, and is therefore disabled by default.
Notice: See apt-secure(8) manpage for repository creation and user configuration details.
Notice: Some sources can be modernized. Run 'apt modernize-sources' to do so.

There’s a boot and a root partition (LUKS-encrypted).

Do you mean if I’ve selected the Kubuntu drive as the first boot priority in my BIOS?
When I first experienced the error, I went into my BIOS to see the boot priority. Windows had first priority, which I changed to Kubuntu, but I still couldn’t boot into Kubuntu.

Your Kubuntu disk (sdb) does not contain an ESP (Efi System Partition).

Is sdc1 the ESP for your PC?

1 Like

Did you try to download boot repair a second time as the server may have been down temporarily? Did you try downloading it from the ubuntu site in the link posted above by oldfred?

The sdb drive appears to have boot and / (root filesystem) partitions and no EFI partition on that drive. Which drive has windows as the only drive I see that has a partition with a standard size for EFI is sdc (sdc1).

Running the command below will provide information such as filesystem type, disk label type and will show the EFI partition. That is a lower case letter L in the command.

sudo parted -l
2 Likes

As per link on installing Boot-Repair into an Ubuntu live installer:

sudo add-apt-repository ppa:yannubuntu/boot-repair && sudo apt update
sudo apt install -y boot-repair && boot-repair

1 Like

sdc1 is apparently an unformatted partition on my internal, seperate from Kubuntu or Windows install, HDD.
This is for storage, music, videos and such.

Here are screenshots of the other partitions on it as well.

Here is what sudo parted -l shows:

kubuntu@kubuntu:~$ sudo parted -l
Model: ATA Samsung SSD 870 (scsi)
Disk /dev/sda: 1000GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags: 

Number  Start   End     Size    Type     File system  Flags
 1      1049kB  4296MB  4295MB  primary  ext4         boot
 2      4296MB  1000GB  996GB   primary


Model: ATA Samsung SSD 850 (scsi)
Disk /dev/sdb: 500GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags: 

Number  Start   End    Size   Type     File system  Flags
 1      1049kB  316MB  315MB  primary  ntfs
 2      555MB   500GB  500GB  primary  ntfs         boot


Model: ATA WDC WD4005FZBX-0 (scsi)
Disk /dev/sdc: 4001GB
Sector size (logical/physical): 512B/4096B
Partition Table: gpt
Disk Flags: 

Number  Start   End     Size    File system  Name                          Flags
 1      17.4kB  16.8MB  16.8MB               Microsoft reserved partition  msftres
 2      16.8MB  4001GB  4001GB  ntfs         Basic data partition          msftdata


Model: WDC WDS5 00G2B0B (scsi)
Disk /dev/sdd: 500GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags: 

Number  Start   End    Size   Type     File system  Flags
 1      1049kB  500GB  500GB  primary


Model: Generic STORAGE DEVICE (scsi)
Disk /dev/sde: 62.2GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags: 

Number  Start   End     Size    Type     File system  Flags
 1      1049kB  62.2GB  62.2GB  primary               boot
 2      62.2GB  62.2GB  33.6MB  primary  fat16        esp


Model: Linux device-mapper (crypt) (dm)
Disk /dev/mapper/luks-1e81afe5-b2da-43da-b27b-b85d1f0b15b4: 996GB
Sector size (logical/physical): 512B/512B
Partition Table: loop
Disk Flags: 

Number  Start  End    Size   File system  Flags
 1      0.00B  996GB  996GB  ext4


kubuntu@kubuntu:~$ 

The GENERIC STORAGE DEVICE (scsi) is my Ventoy live USB, which I would assume has its own ESP?

I have installed Boot Repair using these instructions.
However, when I start the app, it says “You may want to retry after mounting your encrypted partitions so that the tool can verify their contents. (cryptsetup open)”.

I have already opened the encrypted partition using Dolphin File Manager, so do I really have to do this?
Boot Repair also says that it will modify the mount point of sdc2 in order to remove spaces and special characters, but will this reformat the drive, since this is where I have all of my important files?

I’m inside of Boot Repair now.
The GRUB location, which this will supposedly repair, matches with the boot partition on my Kubuntu drive.
Any settings I should change in here, or should i just click “Apply” to repair?:

No, do not do anything yet.
Prepare the boot-repair report and post the link to this thread

Is the “BootInfo summary” the boot-repair report?:

Post #3 that is what I requested. BootInto summary report.

Note that we want to see report as Boot-Repair will use a variety of default. Most case for most users those are fine. But UEFI vs old BIOS boot, or multiple installs may confuse Boot-Repair & you need specific instructions.

1 Like

Here’s the pastebin report:
https://paste.ubuntu.com/p/h3XHBRhvSf/

Yet Windows 10 and Kubuntu 25.10 are installed in old-fashioned Legacy Mode

Boot repair states

BIOS/UEFI firmware: V1.9(4.6) from American Megatrends Inc.
This live-session is in Legacy/BIOS/CSM mode (not in EFI mode).

Can you supply some information about your PC?
Model?
Make?
Age?

1 Like

My PC is custom-built:
Z87-G45 GAMING Motherboard
Corsair Vengeance DDR3 16GB 1600MHz
Intel i7-4770K 3.9GHz

My motherboard supports UEFI I am sure, but I’ll check if I have to.
I’ll just have to reconfigure the live environment afterwards.