I don't think the current implementation will be able to boot from an encrypted volume. I may have an idea of a solution that may work, but it'll take a bit to implement. See, I believe when you encrypt the APFS volume, the system will resort to loading boot.efi from the "Preboot" partition. If I just edit the script to look for that if the volume is encrypted, it should work, but would also add more complications that I don't want to deal with until we ensure the current method boots non-encrypted APFS volumes reliably.
Sure, and I agree that’s a priority.
When that is fully worked out, I hope we’ll get booting from encrypted volumes too, though
[doublepost=1504207040][/doublepost]Ok, encrypting via FileVault 2 is taking place as we speak. We’ll see what will come out of that.
One interesting note here: previously when you turned FileVault on while booted into OS (as opposed to turning it on during post-installation setup), the machine immediately rebooted and you were presented with that EFI passcode screen. After you typed it in, the OS booted and the encryption continued.
But now it seems like it’s encrypting right away. It didn’t reboot, just started encrypting. Now I wonder: is that because of how APFS is handling whole-disk encryption, or it’s just a change in FileVault under High Sierra, regardless of the filesystem used.
Will report whether I can boot into it when it’s done encrypting.
Last edited: