mjhjmtu

So I'm installing a new Arch with the document here for a whole system encryption.

The first part I get confused is here which the document wrote:

Warning: GRUB does not support LUKS2. Do not use LUKS2 on partitions that GRUB needs to access.

But in the later part of the section, it told me to run the command cryptsetup luksFormat /dev/sda3. But as I run it it ask for a password but doesn't it said GRUB doesn't support LUKS2?

Later I enter the password, go down through to grub installing which I run grub-mkconfig -o /boot/grub/grub.cfg and it said filaed to connect lvmetad, but since it's warning I ignored it.

Later I go through the process till the last part without getting any error.

But then I exit arch-chroot and reboot but it can't boot, it skipped to next OS (which is Windows 10 in my case), why? Which part did I get wrong? How to solve it?

P.S. Here is a table of my disk with command lsblk

NAME SIZE TYPE MOUNTPOINT
sda 114.6G disk 
 sda1 4G part
 sda2 4G part /mnt/boot/efi
 sda3 16G part 
 cryptboot 16G crypt /mnt/boot
 sda4 90.6G part 
 lvm 90.6G crypt
 AALEvol-swap 8G lvm [SWAP]
 AALEvol-root 82.6G lvm /mnt

Create a partition on beginning of your Hard Disk Drive, it's size should be between 600 MB and 1GB, and in Linux setup mark that partition as /boot partition. You shouldn't encrypt the boot partition as none of your potentially sensitive data will be written to it.

If you want to wipe the entire Hard Disk Drive before re-partitioning, i suggest you use fdisk -l | more to list all your Hard Disk Drives and all partitions on them, then when you find the drive do
dd if=/dev/urandom of=/dev/sd(X) where X is your HDD letter.

Then create other partitions which will be encrypted: 1./SWAP, 2./ROOT and 3. /HOME (optional).