[SOLVED] 14.2 setup encrypted UEFI elilo LUKS & LVM crash

GrumpyGnome · 04-07-2017, 10:25 AM

Hello,
I have a Surface Pro 3 running Slackware 14.2 and now am trying to redo the installation with full disk encryption. My efforts to date are all resulting in a failed boot with what I think is a crash. The boot process is looking normal and in a rapid succession of screens ends with a trace call.

The README_CRYPT.TXT doc describes lilo only. I follow the readme section 'Combining LUKS and LVM' down to where it says to modify the lilo.conf.
My first attempt was to find elilo.conf and make a similar mod to that file.
This is after chroot /mnt so am in the setup /mnt dir tree.
I found elilo.conf at:
/boot/efi/EFI/Slackware
The boot crashes after loading to the point of checking for PS2 mouse and then rapid screens and this:
I had to attach a jpg of the last screen as I don't know if there is a way to log the boot process.

I then found a post by brobr about his config and tried to follow that.

Code:

http://www.linuxquestions.org/questions/slackware-14/full-disk-encryption-and-elilo-4175595476/

It is sadly way over my head. I tried to follow it exactly but my boot is still crashing.

I tried to make a video at 100fps of the process and the screens after the PS2 search are all unreadable.
Is there a way to log the boot process?
Has anyone got a pointer for a UEFI LUKS and LVM setup?
Happy Trails

Didier Spaier · 04-10-2017, 09:09 AM

Maybe this article can help. I still have to translate it to English though. I wrote it for Slint (Slackware derivative) but I think that it is also relevant for Slackware and it is inspired from README_CRYPT as well, as indicated.

GrumpyGnome · 04-15-2017, 10:12 AM

Didier Spaier, Thank you. Amazingly after 45 years without French I still could understand some and with the code gained some understanding of this process. I also found some threads for Slackware 14 and 14.1 (below).
I wanted to report back on my status:
I have now gotten a full encryption to boot to the point of asking for a disk password.
The USB keyboard does not work (tried the MS Type and two USB keyboards).
I am wondering if USB keyboard support is missing from vmlinuz-generic.

At this point I will close this thread as answered.

I have some leads on the keyboard issue:
https://www.linuxquestions.org/quest...ms-4175506352/
https://www.linuxquestions.org/quest...vm-4175495433/

When I get the Surface Pro 3 running with full disk encryption and have some time to use it I'll make a post on how it all works and specific lessons learned.

-----------------------
Here is the short story for what I am now doing to get at least to the enter password point.

I followed the README_CRYPT.TXT Section: Combining LUKS and LVM almost to the letter. It starts to become fuzzy when I get to the mkinitrd section. But I believe I was not placing the initrd.gz file I made in the correct place.

My disk partitions:
/dev/sda1 200M EFI System
/dev/sda2 128M Microsoft reserved
/dev/daa3 118G Linus filesystem
My crypt LVM:
/dev/cryptvg/swap
/dev/cryptvg/root
/dev/cryptvg/home

I changed mkinitrd:

Code:

  # mkinitrd -c -k 4.4.14 -m ext 4 -f ext4 -r /dev/sdal -h /dev/cryptvg/swap -C /dev/ sda3 -L -1 gb -o initrd-4.4.14.gz

This is from information I got from both Didier and brobr posts and reading the man pages for mkinitrd.

Then I was careful to copy these two files:
initrd-4.4.14.gz
vmlinuz-generic-4.4.14
into:
/boot/efl/EFI/Slackware
I edited the /boot/efl/EFI/Siackware/elilo.conf:

Code:

chooser=simple
delay=1
timeout=1
#
image=vmlinuz
	label=vmlinuz
	initrd=initrd-4.4.14.gz
	read-only
	append="root=/dev/cryptvg/root vga=normal ro resume=/dev/cryptvg/swap"

Then rebooted. Well, I have to press and hold the power button 15 sec to force a power down.
Neither reboot or shutdown work when I finish.
Happy Trails

syg00 · 04-15-2017, 06:25 PM

Good for you, and thanks for the update. I keep thinking I should try one of those things ...
FWIW, it seems better kernel support is on the way - Fedora has activated new options in 4.11 as I posted somewhere else. Found it - here.