cryptsetup encryption of root logical volume

husarz · 09-10-2023, 04:29 PM

On Fedora 38 I have encrypted root logical volume using this instruction:
https://unix.stackexchange.com/a/710373
After encryption I can do open and mount of the encrypted root logical volume. Then it is working. Then did grub2-mkinstall and dracut -f -kv on chrooted system to apply all changes. My problem is that I can't boot system now with this encrypted root logical volume.

Code:

$ lsblk -o name,uuid
(...)
├─sdb2           <>
│ ├─vg0temp-homey <>
│ ├─vg0temp-swap <>
│ └─vg0temp-root 9bcb9c4a-db77-42c1-a2d4-4a39c4b87567
(...)

Code:

/etc/fstab:
/dev/mapper/vg0temp-root    /                       ext4    defaults        1 1

/etc/crypttab:
vg0temp-root /dev/vg0temp/root	none

grub2 cmdline:
GRUB_CMDLINE_LINUX="resume=/dev/mapper/vg0temp-swap rd.luks.uuid=9bcb9c4a-db77-42c1-a2d4-4a39c4b87567 rd.lvm.lv=vg0temp/swap rhgb quiet enforcing=0"

During the boot process it stucks with:

Code:

[ TIME ] Timed out waiting for device dev-disk-by\x2duuid-9bcb9c4a\x2ddb77\x2d42c1\x2d4a39c4b87567.device - /dev/disk/by-uuid/9bcb9c4a-db77-42c1-4a39c4b87567.
[DEPEND] Dependency failed for systemd-cryptsetup@luks\x2d9bcb9c4a\x2ddb77\x2d42c1\x2d4a39c4b87567.service - Cryptography Setup for luks-9bcb9c4a-db77-42c1-4a39c4b87567.
[DEPEND] Dependency failed for cryptsetup.target - Local Encrypted Volumes

dc.901 · 09-11-2023, 08:50 AM

I've never tried to encrypt post installation so I maybe off here, but I see this error:

Code:

Timed out waiting for device dev-disk-by\x2duuid-9bcb9c4a\x2ddb77\x2d42c1\x2d4a39c4b87567.device - /dev/disk/by-uuid/9bcb9c4a-db77-42c1-4a39c4b87567.

Shouldn't that have a luks-<disk-uuid> there?
Do you get prompt to enter password during boot?
What is in your fstab?

husarz · 09-11-2023, 10:25 AM

Quote:

Originally Posted by dc.901

Shouldn't that have a luks-<disk-uuid> there?

According to documentation I found about kernel parameters that can be found here:
https://mirrors.edge.kernel.org/pub/...dracutcmdline7

Code:

 rd.luks.uuid=<luks uuid>
    only activate the LUKS partitions with the given UUID. Any "luks-" of the LUKS UUID is removed before comparing to <luks uuid>.

Quote:

Originally Posted by dc.901

Do you get prompt to enter password during boot?

No, it just hangs after those three lines followed by:

Code:

[ OK ] Reached target sysinit.target - System Initialization.
[ OK ] Reached target basic.target - Basic System.

Quote:

Originally Posted by dc.901

What is in your fstab?

I showed it in my first post. What do you wish to see more?