LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-08-2013, 04:30 PM   #1
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
Using LUKS with a custom kernel on Debian.


I followed this tutorial to create a new kernel:
http://mapopa.blogspot.co.uk/2009/01/compiling-2.html
All is well until I try to set up a LUKS volume using this tutorial;:
http://balau82.wordpress.com/2011/08...ves-with-luks/
I find that this happens:
Code:
cryptsetup luksFormat /dev/sdh2

WARNING!
========
This will overwrite data on /dev/sdh2 irrevocably.

Are you sure? (Type uppercase yes): YES
Enter LUKS passphrase: 
Verify passphrase: 
device-mapper: reload ioctl on temporary-cryptsetup-21020 failed: Invalid argument
Failed to setup dm-crypt key mapping for device /dev/sdh2.
Check that kernel supports aes-cbc-essiv:sha256 cipher (check syslog for more info).
Failed to write to key storage.
Which means that when I try to format the disk I can't because the password is not stored.

I'm compiling the latest 3.8.6 and I did try to include the encryption modules last time but I am sure I'm missing something. How do I compile with al the crypto stuff?
 
Old 04-09-2013, 08:13 AM   #2
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Original Poster
Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
I've found that the sha modules aren't being loaded automatically, but if I run:
Code:
morprobe -v sha
THey are then loaded:
Code:
# lsmod |grep sha
sha1_ssse3             16911  0 
sha1_generic           12582  1 sha1_ssse3
But I still find the same problem setting up a luks volume.
 
Old 04-29-2013, 08:22 AM   #3
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Original Poster
Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
I seem to have solved this but I'm not sure how.
I think I must have missed some SHA options when compiling the kernel -- just compiled one now and made sure to add all the SHA support to the kernel and not as modules (I'll try them as modules later, perhaps) and now all seems fine.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Custom Kernel requirements for LVM+LUKS? TommyC7 Slackware 5 06-05-2012 12:42 PM
Debian 6.0 - custom kernel compile Kernel panic - not syncing: VFS: Unable to mount Bono Debian 5 05-06-2011 06:18 PM
slackware64 lvm/luks and mkinitrd for custom kernel chopp Slackware 19 08-25-2009 02:33 PM
custom kernel the debian way h/w Debian 6 01-30-2006 10:52 AM
Kernel-Patch Debian Logo 2.6.2 not correctly working for custom kernel 2.6.11 smp deepclutch Debian 3 06-27-2005 03:59 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:30 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration