[SOLVED] make system ask password for encrypted partitions only once, not for each of them?

saivnoba · 05-29-2011, 09:08 PM

Hi all,
I have installed debian 6 on two of my laptops. During installation I chose to encrypt my partitions (swap, root and home). Now I find it annoying that during boot up I'm asked for password, for each of these partions seperately. I have given same password for all three of them. How can I make the system ask for the password only once. I know it can be done because on fedora it was like that before.

Thanks in advance.

jschiwal · 05-29-2011, 09:38 PM

Fedora uses LMV2. A single Physical volume may have been encrypted below the logical volumes.

j1alu · 05-30-2011, 05:10 AM

scroll down to the bold headline "adding a keyfile":
http://www.debianuserforums.org/viewtopic.php?f=9&t=460

I did not do it (ever), but knew that i read about it. Not sure if its what you ask for, just check.

jschiwal · 06-01-2011, 01:25 PM

Thanks j1alu. Excellent idea to use a passphrase on the first partition, and place the keyfile for the other encrypted partitions in that one.

saivnoba · 06-02-2011, 10:11 AM

Hi jschiwal,
Sorry if I was not more specific. I do have an lvm set up(debian doesn't use lvm2? 'lvm version' gives me, lvm version: 2.02.66(2)). I have sda1 as /boot (ext2) and sda2 as lvm setup where i have swap, root, home and multimedia volumes. I have also gone for encryption during installation. j1alu's link was a great help. Thats exaclty what I wanted to achieve.

Hi j1alu,
Thank you very much. instructions on your link solved the problem. However on Fedora for same setup, I didnot see any keyfiles being added, yet it did not ask password multiple times. Even now, during installation process, it mounts encrypted volumes and at password prompt has a checkbox saying 'this is global passphrase' (I don't remember exact words). I was actually looking for this 'global passphrase' kind of thing. Anyway keyfile trick works for me. Thank you again.

j1alu · 06-02-2011, 01:07 PM

to be honest: i only gave the link ( i didn't even read that part of the how-to carefully).
fsmithred does a good job with his how-tos (he has got some at forums.debian.net too, iirc). If trouble is there he usually helps good too. So: He is the one to thank.
But i am glad that it worked.