[SOLVED] System encryption broken with update

ndgrahams · 2012-02-15 15:25:31

After a full update, including kernel to what must be 2.3.5-1, I now can't boot my encrypted setup. I've tried (I think) every /dev/sdaX option in case the kernel change changed those - but in addition the options (1,2,3,5,6) are there booting off a live arch disk as in my broken system.

The system was set up according to the LUKS Archlinux wiki page.

When booting, I get what looks normal (I wouldn't necessarily notice a difference): after "Booting the kernel.":

:: Starting udevd...
done.
:: Running Hook [udev]
:: Triggering uevents...done.
Waiting 10 seconds for device /dev/mapper/job-jobroot ...
ERROR: Unable to find root device '/dev/mapper/job-jobroot'.

... and it drops me into a recovery shell.

Same thing with fallback kernel.

The pertinent grub (legacy) line is:

kernel /vmlinuz26 root=/dev/mapper/job-jobroot cryptdevice=/dev/sda6:bildad ro

Any ideas? I should be able to get into the partition from an external disk boot - easiest would be Ubuntu - but I wouldn't know what to do from there.

Thanks

Last edited by ndgrahams (2012-02-15 21:19:10)

saharchie · 2012-02-15 15:54:40

hmmm.... It does seem that some config files need to be reviewed .... are you loading any kernel modules in mkinitcpio.conf before boot ?

The Arch CD works fine to recover the system. After bootup, one just has to modprobe the appropriate modules, unlock and mount the encrypted parition and then chroot into the environment for further investigation and/or rebuilding mkinitcpio.

https://wiki.archlinux.org/index.php/Change_Root
https://wiki.archlinux.org/index.php/Sy … _with_LUKS

/dev/zero · 2012-02-15 16:43:48

We have two problems:

The wiki page you mention is very large. Please be more specific about your setup. Specifically, it is impossible to answer these questions without knowing whether you have LUKS over LVM or LVM over LUKS or something else, and your LVM structure, and on what partitions; even if all that information really is on the wiki, you should at least summarise what you've done.
The internets have already dealt with similar problems aplenty. In particular, we had a similar problem on these forums within the past week. Please tell us what you found by stfwing and explain what went wrong when you tried out whatever you discovered.

Archlinux Forum Etiquette: How To Post

ndgrahams · 2012-02-15 19:56:06

Sorry, I wasn't sure what things were helpful to say.

I have LVM on a single LUKS partition, with root, home and swap on that. Apart from making a boot ext2 partition and a large unformatted one (to be LUKS) separate from Windows, I think the installer did all the work for me.

No modules loading in mkinitcpio.conf, only hooks: base, udev, autodetect, pata, scsi, sata, filesystems, usbinput

I didn't see anything relevant on a quick search of the forums and Google. Do you know the thread with this similar problem? Could you link me to it (unless you think it irrelevant)? I'm not familiar with 'stfwing', unless it's the equivalent for a wiki as rtfming is for a manual.

saharchie · 2012-02-15 20:50:23

If the disk is encrypted, and those are your hooks, then 'encrypt' and 'lvm2' seem to be missing.

Don't forget to rebuild mkinitcpio after updating the HOOKS array.

/dev/zero · 2012-02-15 21:02:36

ndgrahams wrote:

I have LVM on a single LUKS partition, with root, home and swap on that. Apart from making a boot ext2 partition and a large unformatted one (to be LUKS) separate from Windows, I think the installer did all the work for me.
No modules loading in mkinitcpio.conf, only hooks: base, udev, autodetect, pata, scsi, sata, filesystems, usbinput

Okay, as saharchie says, your initial ramdisk (via mkinitcpio.conf) needs a couple of extra hooks. Order matters. Since you have LUKS underneath the LVM, keep the order saharchie says. If you have LUKS over LVM, you reverse the order. If you have a LVM-LUKS-LVM sandwich, you need two calls to the lvm2 hook, one before the call to encrypt, and one after.

ndgrahams wrote:

I didn't see anything relevant on a quick search of the forums and Google. Do you know the thread with this similar problem? Could you link me to it (unless you think it irrelevant)? I'm not familiar with 'stfwing', unless it's the equivalent for a wiki as rtfming is for a manual.

Stfw = "Search the frickin web" . Google, forums, wiki. In particular, if I google "site:bbs.archlinux.org crypt OR luks lvm" I get a whole bunch of more-or-less relevant stuff.

ndgrahams · 2012-02-15 21:18:21

Wooo!

Thank you. Adding in encrypt and lvm2 hooks before filesystem; chroot and mkinitcpio -p linux; and it works again.

I can't imagine how those got lost - I did nothing manually (aside from this update) between it working and not.

Arch Linux

#1 2012-02-15 15:25:31

[SOLVED] System encryption broken with update

#2 2012-02-15 15:54:40

Re: [SOLVED] System encryption broken with update

#3 2012-02-15 16:43:48

Re: [SOLVED] System encryption broken with update

#4 2012-02-15 19:56:06

Re: [SOLVED] System encryption broken with update

#5 2012-02-15 20:50:23

Re: [SOLVED] System encryption broken with update

#6 2012-02-15 21:02:36

Re: [SOLVED] System encryption broken with update

#7 2012-02-15 21:18:21

Re: [SOLVED] System encryption broken with update

Board footer