[Pkg-cryptsetup-devel] Bug#478268: Bug#478268: cryptsetup: LUKS device no more recognized at boot

Luca Capello luca at pca.it
Mon Apr 28 16:04:41 UTC 2008


Hi Jonas!

On Mon, 28 Apr 2008 16:32:14 +0200, Jonas Meurer wrote:
> is /dev/sda2 an encrypted root partition? If this is the case, then I
> believe that some issues with the initramfs scripts are the reason
> here.

The only partion not encrypted on my system is /dev/sda1, i.e. /boot.
Thus, /dev/sda2 is the LVM PV which contains /, /home, swap and four
others /mnt LVs.

> do you get a busybox rescue prompt after the cryptsetup failure?

No busybox rescue prompt, after having failed for three times cryptsetup
again starts asking me for the passhprase and after three more failures
the system "blocks" (but I still see what I type) on:

=====
cryptsetup: maximum number of tries exceeded
Done.
Being: Waiting for root file system... ...

[then, after about 5min something like the following]
/dev/mapper/vggismo-lvroot not available.  Check `cat /proc/modules`.
Dropping into a shell.
=====

And the machine restart :-(

Booting with the "break" kernel option (as suggested at bug #466573 [1])
causes the machine to reboot before prompting for the cryptsetup
password, at least with kernel 2.6.25-trunk-amd64.

> On 28/04/2008 Luca Capello wrote:
>> This is a bug in cryptsetup_2:1.0.6-1: simply downgrading to the
>> previous version (2:1.0.6~pre1+svn45-1) is enough to solve it.
>> 
>> Since I thought this could be caused by the default hash being changed
[...]
> As you use luks encryption, the hash doesn't matter here. cryptsetup
> ignores hash settings for luks devices.
> To me it seems like some module is missing/not being loaded. But I might
> be wrong.

I added the four modules you suggested (dm-mod, dm-crypt, sha256 and
aes) to /usr/share/initramfs-tools/modules, regenerated the initrd, but
nothing changed.

Thx, bye,
Gismo / Luca

Footnotes: 
[1] http://bugs.debian.org/466573
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 306 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20080428/448c7258/attachment.pgp 


More information about the Pkg-cryptsetup-devel mailing list