initramfs and dm-crypt

[abduct]

Hi everyone

I recently updated my system and I have ran into some issues trying to boot into the new initramfs/kernel.

Previous kernels and initramfs work fine and are still usable.

I upgraded my kernel from 6.3.1 to 6.5.3 along with all the other package upgrades (openssl 3.0, dracut, etc) and I have a few issues during boot.

Originally at the end of the initramfs boot sequence I am asked for my passphrase to unlock and mount my disk.

Currently I get a message of "dm-crypt not found in /lib/modules/6.5.3-gentoo/" which I resolved via marking dm_crypt as a modules in my kernel, recompiling, and telling dracut to include the driver into the initramfs. The message is now gone.

After the reboot I am successfully asked for my passphrase, but after entering it I get the message "hash algorithm whirlpool not available"

To try to remedy this I marked whirlpool as a module in the kernel and told dracut to also include this driver, but this did not work and ended with the same message.

I am not sure , but this may be related? viewtopic-t-1164295-highlight-whirlpool.html

What steps can I take to debug this. I am not sure what software dracut is using to obtain whirlpool support and how I can add it back. I suppose my other option is to convert my encrypted disk to another hashing function?

At the end of the day I wish to convert dm_crypt and whirlpool back to built in modules and be able to unlock, mount, and boot into my new system, but this whirlpool issue has me hung up.

Many thanks!

[alamahant]

Try one of the following

Code: Select all

USE="weak-ssl-ciphers" emerge -1av openssl
or
USE="-openssl gcrypt" emerge -1av cryptsetup
or
USE="-openssl kernel" emerge -1av cryptsetup
or
USE="-openssl nettle" emerge -1av cryptsetup

After each try plz rebuild the initramfs.
If any of the above works plz make it permanent via package.use.

[abduct]

Thanks for the tip. Setting crypt setup to use the kernel backend fixed the whirlpool algo issue.

Not sure why the weak-ssl-ciphers didnt work with openssl, but of well at least I can login again.

Thanks