View previous topic :: View next topic |
Author |
Message |
Neci n00b
Joined: 22 Mar 2013 Posts: 2
|
Posted: Fri Mar 22, 2013 11:38 am Post subject: luks + lvm full disk encrytion |
|
|
Hello,
i try to do full encyption of disk with grub2 but after start they ask me for password and looks like my password is wrong:
Code: |
Attemting to decrypt master key...
Enter passphrase for hd0,msdos3 (...my_uuid...):
error: access denied.
|
But my password is correct. Whole partition sda3 was encrypted with cryptsetup and luks. And after that i create lvm volume group with logical volumes.
Code: | cryptsetup status root
/dev/mapper/root is active and is in use.
type: LUKS1
cipher: serpent-cbc-essiv:sha256
keysize: 256 bits
device: /dev/sda3
offset: 4096 sectors
size: 519024640 sectors
mode: read/write |
I install grub2 with device-mapper flag and GRUB_PLATFORMS="emu pc"
i use this command to install grub
Code: |
GRUB_CRYPTODISK_ENABLE=y grub2-install --modules="configfile linux crypto search_fs_uuid" /dev/sda
Installation finished. No error reported.
|
and grub-install will create image with these options:
Code: | /usr/bin/grub2-mkimage -c /boot/grub2/i386-pc/load.cfg -d /usr/lib/grub/i386-pc -O i386-pc --output=/boot/grub2/i386-pc/core.img '--prefix=(lvm/vg-boot)/grub2' configfile linux crypto search_fs_uuid biosdisk ext2 part_msdos cryptodisk luks gcry_serpent gcry_serpent gcry_sha1 gcry_sha256 lvm |
output from grub-install --debug is here http://pastebin.com/AnLAs2U4
Thanks |
|
Back to top |
|
|
Hu Moderator
Joined: 06 Mar 2007 Posts: 21602
|
Posted: Fri Mar 22, 2013 10:38 pm Post subject: |
|
|
As a guess, do you use the American keyboard layout in normal operation? A common problem with early passwords is that you set the password while your local keyboard layout is in effect, but then enter the password while the default American layout is in effect. If this occurs, and your password uses characters that are bound to different keys depending on keyboard layout, then you will type the "wrong" password. |
|
Back to top |
|
|
Neci n00b
Joined: 22 Mar 2013 Posts: 2
|
Posted: Sat Mar 23, 2013 6:40 am Post subject: |
|
|
Hello, i think this is not a problem after acess denied i have grub command line and i try to type password into it and is like i have.
Then i try to cryptomount hd0,msdos3 and type pw again but without sucess. |
|
Back to top |
|
|
Hu Moderator
Joined: 06 Mar 2007 Posts: 21602
|
Posted: Sat Mar 23, 2013 2:58 pm Post subject: |
|
|
I missed that you are trying to mix Grub2 and LUKS. That may not work. I thought your initial error message looked unusual due to transcription errors, not due to use of Grub2. |
|
Back to top |
|
|
|