LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-24-2017, 01:09 PM   #1
Darkyere
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Rep: Reputation: Disabled
Trying to make Mint GRUB2 boot OpenSUSE encrypted boot Help


I have succesfully made a fully encrypted system (Boot included) with linux mint now im trying to do the same with OpenSUSE and using Mint GRUB2 to load it.

But i simply cant make it works.

If anyone can assist at configuring Grub.cfg to unlock and encrypted boot i would highly appreciate it.

lsblk

Code:
sda                          8:0    0   50G  0 disk  
├─sda1                       8:1    0    1G  0 part  
│ └─MintPlasmaCryptBoot    252:4    0 1022M  0 crypt /boot
├─sda2                       8:2    0   25G  0 part  
│ └─md0                      9:0    0   50G  0 raid0 
│   └─MintPlasmaCrypt      252:0    0   50G  0 crypt 
│     ├─MintPlasma-lvroot  252:1    0   25G  0 lvm   /
│     ├─MintPlasma-lvhome  252:2    0   22G  0 lvm   /home
│     └─MintPlasma-lvswap  252:3    0    3G  0 lvm   [SWAP]
├─sda3                       8:3    0    1G  0 part  
│ └─OpenSUSEMixCryptBoot   252:9    0 1022M  0 crypt 
└─sda4                       8:4    0   23G  0 part  
  └─md1                      9:1    0   46G  0 raid0 
    └─OpenSUSEMixCrypt     252:5    0   46G  0 crypt 
      ├─OpenSUSEMix-lvroot 252:6    0   25G  0 lvm   
      ├─OpenSUSEMix-lvhome 252:7    0   18G  0 lvm   
      └─OpenSUSEMix-lvswap 252:8    0    3G  0 lvm   
sdb                          8:16   0   50G  0 disk  
├─sdb1                       8:17   0    1G  0 part  
├─sdb2                       8:18   0   25G  0 part  
│ └─md0                      9:0    0   50G  0 raid0 
│   └─MintPlasmaCrypt      252:0    0   50G  0 crypt 
│     ├─MintPlasma-lvroot  252:1    0   25G  0 lvm   /
│     ├─MintPlasma-lvhome  252:2    0   22G  0 lvm   /home
│     └─MintPlasma-lvswap  252:3    0    3G  0 lvm   [SWAP]
├─sdb3                       8:19   0    1G  0 part  
└─sdb4                       8:20   0   23G  0 part  
  └─md1                      9:1    0   46G  0 raid0 
    └─OpenSUSEMixCrypt     252:5    0   46G  0 crypt 
      ├─OpenSUSEMix-lvroot 252:6    0   25G  0 lvm   
      ├─OpenSUSEMix-lvhome 252:7    0   18G  0 lvm   
      └─OpenSUSEMix-lvswap 252:8    0    3G  0 lvm   
sr0                         11:0    1 1024M  0 rom
and blkid

Code:
/dev/mapper/MintPlasmaCrypt: UUID="5PKiUN-H1zJ-0pze-Nyqn-aDb7-lXea-AyB70S" TYPE="LVM2_member"
/dev/mapper/MintPlasma-lvroot: UUID="8cd7ec00-bcae-41d7-a879-c59cf745f0bd" TYPE="ext4"
/dev/sda1: UUID="b40a82ab-c4a8-4e29-ad5c-a42e03349da1" TYPE="crypto_LUKS" PARTUUID="e2dd71f0-01"
/dev/sda2: UUID="732471af-cc1c-022e-9715-7876424a0986" UUID_SUB="e6adc061-aada-f1ad-4f09-2f2b3a8a5d55" LABEL="mint:0" TYPE="linux_raid_member" PARTUUID="e2dd71f0-02"
/dev/sda3: UUID="bea0b5bb-2875-4046-856c-402d12bed31f" TYPE="crypto_LUKS" PARTUUID="e2dd71f0-03"
/dev/sda4: UUID="aeb4f547-f717-2734-331c-083c5f77e64c" UUID_SUB="f6df36c5-9998-564d-9a23-def5e5f7c74b" LABEL="mint:1" TYPE="linux_raid_member" PARTUUID="e2dd71f0-04"
/dev/sdb2: UUID="732471af-cc1c-022e-9715-7876424a0986" UUID_SUB="ec3a76ba-fd1f-216e-34f5-bf9665fea89d" LABEL="mint:0" TYPE="linux_raid_member" PARTUUID="89a31b9e-02"
/dev/sdb4: UUID="aeb4f547-f717-2734-331c-083c5f77e64c" UUID_SUB="a0bf37e4-6048-fc48-4130-c6731e47751a" LABEL="mint:1" TYPE="linux_raid_member" PARTUUID="89a31b9e-04"
/dev/md0: UUID="7ac45c32-145a-4a6d-807c-16c913a5a649" TYPE="crypto_LUKS"
/dev/md1: UUID="ccc38c8b-1633-41b6-ae99-95ba29a67571" TYPE="crypto_LUKS"
/dev/mapper/MintPlasma-lvhome: UUID="81ffdf3b-1ad9-45af-8f33-49c70ae3b3e5" TYPE="ext4"
/dev/mapper/MintPlasma-lvswap: UUID="9c39ae1f-e5e2-422a-b416-dc4b86465b2a" TYPE="swap"
/dev/sdb1: PARTUUID="89a31b9e-01"
/dev/sdb3: PARTUUID="89a31b9e-03"
/dev/mapper/MintPlasmaCryptBoot: UUID="c4770bd0-bf6b-4aea-bf87-f4c04a0c8843" TYPE="ext4"
/dev/mapper/OpenSUSEMixCrypt: UUID="o1Le7j-qCvx-Y8hy-RaP4-ReAN-NU2r-di2BXQ" TYPE="LVM2_member"
/dev/mapper/OpenSUSEMix-lvroot: UUID="d73221e8-a1f4-47b7-a106-62c5da5ae8a2" TYPE="ext4"
/dev/mapper/OpenSUSEMix-lvhome: UUID="97cac1a7-5f57-4629-b5fc-1ed1a79b92c7" TYPE="ext4"
/dev/mapper/OpenSUSEMix-lvswap: UUID="8c191021-ffce-4337-b731-6caa68b4d5e2" TYPE="swap"
/dev/mapper/OpenSUSEMixCryptBoot: UUID="6ad06673-4653-42ef-9b78-2cdfb7715e0f" TYPE="ext4"
Grub.cfg for opensuse looks like this

Code:
menuentry 'unknown Linux distribution (on /dev/mapper/OpenSUSEMix-lvroot)' --class gnu-linux --class gnu --class os $menuentry_id_option 'osprober-gnulinux-/boot/vmlinux-4.9.3-1-pae.gz--d73221e8-a1f4-47b7-a106-62c5da5ae8a2' {
                insmod part_msdos
                insmod part_msdos
                insmod diskfilter
                insmod mdraid1x
                insmod cryptodisk
                insmod luks
                insmod gcry_serpent
                insmod gcry_serpent
                insmod gcry_sha512
                insmod lvm
                insmod ext2
                cryptomount -u ccc38c8b163341b6ae9995ba29a67571
                set root='lvmid/j2q6ov-arWX-azu0-F89G-0f4P-NsbX-85yzse/hfD0Wh-IiOi-m6zi-UPI1-7E1b-cHya-Hi81G1'
                if [ x$feature_platform_search_hint = xy ]; then
                  search --no-floppy --fs-uuid --set=root --hint='lvmid/j2q6ov-arWX-azu0-F89G-0f4P-NsbX-85yzse/hfD0Wh-IiOi-m6zi-UPI1-7E1b-cHya-Hi81G1'  d73221e8-a1f4-47b7-a106-62c5da5ae8a2
                else
                  search --no-floppy --fs-uuid --set=root d73221e8-a1f4-47b7-a106-62c5da5ae8a2
                fi
                linux /boot/vmlinux-4.9.3-1-pae.gz root=/dev/mapper/OpenSUSEMix-lvroot
        }
anyone knows how to configure GRUB2 to unlock the OpenSUSEMixCryptBoot partition and load the kernel ?

Best Regards,
Darkyere

Last edited by Darkyere; 01-24-2017 at 01:10 PM.
 
Old 01-24-2017, 03:37 PM   #2
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,126

Rep: Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120
Do you have the openSUSE containers listed in the Mint crypttab ?.
 
Old 01-25-2017, 04:20 AM   #3
Darkyere
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Its not a question about Mint being able to unlock OpenSUSE containers from mints perspective.

Its a question about making GRUB2 unlock OpenSUSE boot when i try to boot OpenSUSE through GRUB2.

Ty for your response btw i highly appreciate the input
 
Old 01-25-2017, 04:35 AM   #4
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,126

Rep: Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120Reputation: 4120
Quote:
Originally Posted by Darkyere View Post
Its not a question about Mint being able to unlock OpenSUSE containers from mints perspective.
Really ?.
Which system built the grub boot code ?.
Which system built the initrd ?.
Which system determined what (initrd) hooks are active ?.

Things are rarely as straightforward as one might like.
I asked the question for a reason.
 
Old 01-25-2017, 05:53 AM   #5
Darkyere
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by syg00 View Post
Really ?.
Which system built the grub boot code ?.
Which system built the initrd ?.
Which system determined what (initrd) hooks are active ?.

Things are rarely as straightforward as one might like.
I asked the question for a reason.
Mint build the Grub boot code

OpenSUSE builds its own initramfs
OpenSUSE determines which hooks is active in OpenSUSE own initramfs

----

I though tried to add the OpenSUSE container's to /etc/crypttab and ran update-initramfs -u. they are now unlocked at boot now.

I rebooted and unlocked the containers.

Then i ran update-grub and grub-mkconfig

When in GRUB2 i choose OpenSUSE to boot it still fails.
Tells me it wants to unlock the / system and not the boot

But thanks again for trying

Last edited by Darkyere; 01-25-2017 at 06:03 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Grub2.02 beta text only boot loader on new install of Mint Milo4t Linux - Software 2 03-29-2016 07:57 PM
Encrypted Dual Boot set-up for Mint and Kali Loboexe Linux - Laptop and Netbook 2 03-08-2016 03:51 AM
[SOLVED] Can't get encrypted root partition to boot using grub2 spudgunner Slackware 15 01-15-2014 07:15 AM
[SOLVED] How do I add Opensuse to Grub2 menu in a triple boot setup Speedy624 Linux - Software 4 03-20-2013 05:00 PM
openSUSE won't boot after I resized its partition - grub2 related Mountain Linux - General 18 11-09-2009 01:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:18 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration