LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-11-2013, 03:27 AM   #1
pingu
Senior Member
 
Registered: Jul 2004
Location: Skuttunge SWEDEN
Distribution: Debian preferably
Posts: 1,261

Rep: Reputation: 118Reputation: 118
No prompt at boot for encrypted partition


LinuxMint 14 on a HP ProBook 6465b, /home is encrypted (luks)
Problem is, when booting I don't get a prompt asking for the key? Message on screen is "Disk drive not ready or not present".
I then press "M" for manual recovery, root password, mount /home manually and exit - voila, all is fine.
Of course I could keep doing this but it is pretty annoying, I do want to simply be asked for encryption key.

What I did was, I encrypted /home running LMDE, unfortunately LMDE had a few problems with my hardware (bluetooth & wlan), so I wiped it and installed Mint14.
I did not mount /home during installation so encryption wasn't set up at first, installed that manually.
And so, it works but problem is /home doesn't get mounted/unlocked at boot.

My /etc/fstab:
/dev/mapper/cryptHome /home ext4 defaults 1 2

My /etc/crypttab:
cryptHome /dev/sda6 none luks
#cryptHome UUID=0124c3d0-2bec-4b04-bf56-e2fc72040694
(It doesn't matter which line I use)

The 2 lines for mounting /home manually:
cryptsetup luksOpen /dev/sda6 cryptHome
mount /home
 
Old 06-12-2013, 08:05 PM   #2
Z038
Member
 
Registered: Jan 2006
Distribution: Slackware
Posts: 801

Rep: Reputation: 157Reputation: 157
I wonder if /dev/mapper works in fstab. I always specify /dev/<volumegroupname>/<logicalvolumename> for the device name.

All of these are encrypted partitions mounted in my fstab:

Code:
/dev/vg02/swap   swap             swap        defaults         0   0
/dev/vg02/root   /                ext4        defaults         1   1
/dev/vg02/ds9    /home            ext4        defaults         1   2
/dev/vg01/bk     /mnt/bk          ext3        defaults         1   2
I also boot using an initrd and I specify all of the encrypted devices on the -C switch when I run mkinitrd.

Like so:

Code:
mkinitrd -c -k 3.2.29 -f ext4 -r /dev/vg02/root -m mbcache:jbd2:ext4 \
  -C /dev/sdc5:/dev/sda5:/dev/sdb5 -L -u -o /boot/initrd.gz
 
Old 06-13-2013, 11:36 AM   #3
pingu
Senior Member
 
Registered: Jul 2004
Location: Skuttunge SWEDEN
Distribution: Debian preferably
Posts: 1,261

Original Poster
Rep: Reputation: 118Reputation: 118
Quote:
Originally Posted by Z038 View Post
I wonder if /dev/mapper works in fstab. I always specify /dev/<volumegroupname>/<logicalvolumename> for the device name.
Yes it works - I have no problem mounting the encrypted drive manually.
I think the difference is that you use LVM, I don't.

But that thought about initrd is interresting!
Maybe my initrd needs support for encryption, I will check that next week when I'm back.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Shrink partition (LVM encrypted PVs + encrypted LVs) gedaj Linux - Newbie 2 05-22-2013 03:44 AM
benefit of mounting luks encrypted partition at boot Wojk Linux - General 2 11-02-2012 07:57 PM
Is there an isolinux that will open an encrypted boot partition. dcellis1950 Linux - General 2 07-12-2010 09:00 AM
Stuck at Grub2 prompt after deleting Linux partition of dual boot alcorta Linux - Software 3 07-08-2005 11:12 PM
Encrypted partition does not mount on boot applewax Suse/Novell 2 01-06-2005 11:31 AM


All times are GMT -5. The time now is 09:46 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration