kernel updates overwrite lock protection in grub config

[Guy Van Sanden]

To protect my Ubuntu systems I have installed a GRUB password on them.

I added the lock option to each recovery instance of the kernel because it would mean instant-root.

The problems is that each kernel update calls update-grub which removes the locks and makes the recovery option public again.

[Guy Van Sanden (gvs)]

I tried setting lockalternatives to true and it works at first, but it also gets overwritten by update-grub.

It's easier then adding several lock options though.

[Tollef Fog Heen (tfheen)]

You are aware that you should _not_ uncomment the "lockalternative" option?

The line should read like:

# lockalternative=true

not

lockalternative=true