slackware encryption dm-crypt

rino.caldelli · 07-28-2005, 12:51 PM

I configured my 2.6.12.3 kernel for dm-crypt... everything works then I compile the user-space tool cryptsetup-luks from
http://luks.endorphin.org/dm-crypt
but on make it spits

Code:

keyencryption.c:31:26: libdevmapper.h: No such file or directory
keyencryption.c:35:26: libdevmapper.h: No such file or directory
keyencryption.c: In function `LUKS_endec_template':
keyencryption.c:100: warning: initialization makes pointer from integer 
withouta cast
make[2]: *** [libluks_la-keyencryption.lo] Error 1
make[2]: Leaving directory `/home/x/cryptsetup-luks-1.0.1/luks'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/x/cryptsetup-luks-1.0.1'
make: *** [all] Error 2

I tried using the cryptsetup-1.0.1-i686-pc-linux-gnu-static.bz2 - Precompiled binary version 1.0.1: my kernel is working correctly so I issue the commands written on the luks page

http://luks.endorphin.org/dm-crypt

# cryptsetup luksFormat /dev/loop0

WARNING!
========
This will overwrite data on /dev/loop0 irrevocably.

Are you sure? (Type uppercase yes): YES
Enter LUKS passphrase:
failed to setup dm-crypt mapping.
failed to write to key storage.
Command failed.

What's wrong???

dragoncity99 · 07-29-2005, 09:43 AM

Have u enabled the option:

types = ["device-mapper", 16] in /etc/lvm/lvm.conf ?

Note, this can only be done in LVM though ok.

http://deb.riseup.net/storage/encryption/dmcrypt/

rino.caldelli · 07-29-2005, 05:33 PM

Quote:

Originally posted by dragoncity99
Have u enabled the option:

types = ["device-mapper", 16] in /etc/lvm/lvm.conf ?

Note, this can only be done in LVM though ok.

http://deb.riseup.net/storage/encryption/dmcrypt/

I don't have /etc/lvm/lvm.conf ! I use slackware 10.1 and I don't know what lvm is but shouldn't have anything to do with encryption... right?

gbonvehi · 07-29-2005, 06:26 PM

From http://www.saout.de/misc/dm-crypt/:

Quote:

But I don't want to use LVM!
You don't need LVM. Device-mapper is an all-purpose kernel feature, not tied to LVM in any way.

You should however, setup the kernel as said on the link posted by dragoncity99 to get device mapper working correctly. Then instead of using cryptsetup as stated on that page, use crypsetup-luks.

slackwh0re · 07-30-2005, 01:18 AM

extracted from my slackware setup guide at http://www.partydome.us/?slackware:

Required packages:
hashalot
cryptsetup.sh
device-mapper-1.01.00-i486-1.tgz (from /testing)

1) Compile hashalot, move to /usr/local/bin
2) Move cryptsetup.sh to /usr/local/bin
3) Run 'modprobe dm-crypt' to load the required kernel modules
4) Run 'cryptsetup -c cipher -s keysize create crypto /dev/hda5' to create the crypto
5) Run 'mkdir /crypto' to create the crypto mount point
6) Run 'mount /dev/mapper/crypto /crypto' to access your encrypted file system

links to the packages:
http://www.paranoiacs.org/~sluskyb/h...lot-0.3.tar.gz
http://www.saout.de/misc/dm-crypt/cryptsetup.sh

this is how i got dm-crypt setup under slackware 10.1. sorry but i dont know enough about encryption under linux to help you with the method you are trying. but i can tell you that the instructions above are how i got it working on my system, so you shouldnt encounter any problems.

malo_umoran · 07-30-2005, 10:18 AM

there are packages on http://slackware.php.co.ba.

you need "device-mapper" and "cryptsetup".

I tested it today with 10.1 and everything is running perfectly OK.

M.

rino.caldelli · 07-31-2005, 09:21 AM

Quote:

Originally posted by slackwh0re
extracted from my slackware setup guide at http://www.partydome.us/?slackware:

Required packages:
hashalot
cryptsetup.sh
device-mapper-1.01.00-i486-1.tgz (from /testing)

1) Compile hashalot, move to /usr/local/bin
2) Move cryptsetup.sh to /usr/local/bin
3) Run 'modprobe dm-crypt' to load the required kernel modules
4) Run 'cryptsetup -c cipher -s keysize create crypto /dev/hda5' to create the crypto
5) Run 'mkdir /crypto' to create the crypto mount point
6) Run 'mount /dev/mapper/crypto /crypto' to access your encrypted file system

links to the packages:
http://www.paranoiacs.org/~sluskyb/h...lot-0.3.tar.gz
http://www.saout.de/misc/dm-crypt/cryptsetup.sh

this is how i got dm-crypt setup under slackware 10.1. sorry but i dont know enough about encryption under linux to help you with the method you are trying. but i can tell you that the instructions above are how i got it working on my system, so you shouldnt encounter any problems.

I did what you told me and got a ....

root@x:/usr/local/bin# cryptsetup.sh -c aes -s 12 create crypto /dev/hda2
Error: dmsetup not found in search path.

what does that mean??? It should be a devicemapper error... you haven't told me where you downloaded device mapper from and how you installed it...

thank you

rino.caldelli · 07-31-2005, 09:33 AM

Waiting slackwhore to answer I did this.. I downloaded devicemapper from the link http://slackware.php.co.ba./ that malo_umoran posted and got it working... now here's what I get

Code:

root@x:/home/x# cd /usr/local/bin/
root@x:/usr/local/bin# cryptsetup.sh -c aes -s 12 
create crypto /dev/hda2
Enter passphrase:
Error: Could not create device, see syslog for details.

/dev/hda2 is a mounted vfat partition... what's the problem????

malo_umoran · 07-31-2005, 10:18 AM

Quote:

Originally posted by rinonapo
Waiting slackwhore to answer I did this.. I downloaded devicemapper from the link http://slackware.php.co.ba./ that malo_umoran posted and got it working... now here's what I get

root@x:/home/x# cd /usr/local/bin/
root@x:/usr/local/bin# cryptsetup.sh -c aes -s 12 create crypto /dev/hda2
Enter passphrase:
Error: Could not create device, see syslog for details.

/dev/hda2 is a mounted vfat partition... what's the problem????

don't use "cryptsetup.sh" but just "cryptsetup" from package "cryptsetup-0.1-i686-2mm". I made these packages myself and tested it with kernel 2.6.12.3.

I am using it all the time without any problems ...

example:
# echo PASSWORD | cryptsetup create crypto /dev/hda2
# mount -t ext2 /dev/mapper/crypto /mnt/crypto

important: if you don't give any paramters about encryption, default is "-c aes -s 256"

M.

rino.caldelli · 07-31-2005, 12:59 PM

malo_umoran I did what you said and got

Code:

root@x:/home/x# echo PASSWORD | cryptsetup create crypto /dev/hda2
cryptsetup: error while loading shared libraries: libgcrypt.so.11: 
cannot open shared object file: No such file or directory
root@x:/home/x#

By the way: I wanted to thank everyone for contributing to this post which is getting very interesting.. thank you so much!

malo_umoran · 07-31-2005, 01:17 PM

you of course need libgcrypt. I forgot to mention that, because it was not my package. there are a few of these on linuxpackages.net, just choose your Slack:

http://www.linuxpackages.net/search_...libgcrypt&ver=

and "PASSWORD" in

Code:

echo PASSWORD | cryptsetup create crypto /dev/hda2

is acctualy your password. I wrote it like that to show, how can be used in scripts. you can of course still use

Code:

cryptsetup create crypto /dev/hda2

and after that you will be asked for password.

M.

rino.caldelli · 07-31-2005, 04:24 PM

I'm getting quite frustrated at linux encryption, I've just installed libgcrypt and I get a new error

Code:

root@x:/home/x# cryptsetup create crypto /dev/hda2
cryptsetup: error while loading shared libraries: libgpg-error.so.0: 
cannot open shared object file: No such file or directory

Why is it all so complicated?? I compiled the 2.6 kernel, enabled all modules, installed devicemapper, installed cryptsetup, installed hashalot, now I installed libgcrypt and still I can't encrypt a hard drive!!!!!

dragoncity99 · 07-31-2005, 09:08 PM

I had the same problem before this, and using the same Slack 10.1, this is because actually u need this two files:

1. libgcrypt-1.2.1-i486-1h3x.tgz

2. libgpg-error-1.0-i486-1arf.tgz --> U MISSED OUT THIS ONE

rino.caldelli · 08-01-2005, 01:47 AM

Thank you dragoncity... now I have all programs and libraries and kernel modules, but now i get a more laconic

Code:

root@x:/usr/local/bin# cryptsetup create cryptos /dev/hda2
Command failed: Invalid argument

the sintax is right and /dev/hda2 exists and is a used vfat partition!

By the way out of curiosity I tried using crypto.sh which I had in /usr/local/bin

Code:

root@x:/usr/local/bin# cryptsetup.sh create crypto /dev/hda2
Error: No device mapper support in kernel.
root@x:/usr/local/bin# modprobe device_mapper
FATAL: Module device_mapper not found.

the device mapper in my kernel is activated under block devices!!!

malo_umoran · 08-01-2005, 02:36 AM

strange ... I never had any problems.

do you have both activated:

Code:

<*>   Device mapper support
<*>     Crypt target support

and all the encryptions you need?

M.

p.s.: you don't need "hashalot" for dm-crypt. cryptsetup.sh as an older version needed it.