/boot/grub/menu.lst
kernel /boot/vmlinuz26 cryptdevice=/dev/sda3:sda3_crypt root=/dev/sda2 ro quiet
Otherwise the luksOpen-command fails because it expects a <name>-argument. Of course i also needed the lvm2- and resume-hooks after encrypt.
@ Zariel:
The wiki article suggests writing a new hook when there already is one for the same purpose.
]]>I'm trying to unlock a partition (not the root partition) with the encrypt-hook at early boot-time but it fails with "Device /dev/sda3 not found." Unlocking in /etc/crypttab works fine.
The reason that i want to unlock it with the encrypt-hook is because i want to be able to suspend to disk my laptop and my swap partition is in a logical volume inside the LUKS-parition.
So here are the important bits of my config-files:
/etc/mkinitcpio.conf
HOOKS="base udev autodetect pata scsi sata encrypt filesystems"
/boot/grub/menu.lst
kernel /boot/vmlinuz26 cryptdevice=/dev/sda3 root=/dev/sda2 ro quiet
partitioning:
/dev/sda1 NTFS (Windows)
/dev/sda2 ext4 (Root)
/dev/sda3 LUKS => LVM => /home, /data, /tmp, /var/tmp, swap...
Please don't suggest something like "just encrypt the whole disk" because i did this and it _does_ make a difference with regard to performance.
Any help would be highly appreciated.
qotsa
]]>