Arch Linux

exap

Member

Registered: 2015-08-12

Posts: 14

LUKS don't recognize my correct passphrase

If I boot the Arch-ISO from a DVD, run

cryptsetup open /dev/sdxy root

and enter my password, it will be successfully mapped to /dev/mapper/root.

There will also be the the same LUKS prompt ("Enter passphrase for /dev/sdxy") if I boot Linux with

vmlinuz-linux cryptdevice=/dev/sdb2:root root=/dev/mapper/root rw initrd=/initramfs-linux.img nomodeset

(nomodeset is due to a GPU bug; there will be the same result without this paramter)

But after entering the same password (i checked that innumerous times), it justs says "No key available with this passphrase" and asks me again for the password.

What should I do?

jasonwryan

Anarchist

From: .nz

Registered: 2009-05-09

Posts: 30,424

Website

Re: LUKS don't recognize my correct passphrase

What keymap is set for your installed system?

---

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

exap

Member

Registered: 2015-08-12

Posts: 14

Re: LUKS don't recognize my correct passphrase

Stupid me. The keymap isn't changed until gdm starts.. How can I change the keymap this early in the boot proccess?

Last edited by exap (2015-08-23 23:11:26)

frostschutz

Member

Registered: 2013-11-15

Posts: 1,421

Re: LUKS don't recognize my correct passphrase

By adding the "keymap" hook option to mkinitcpio.conf before the encrypt hook and then recreate initramfs.

There's also another approach: Use multiple passphrases to make LUKS accept it in either keymap.

cryptsetup luksAddKey /dev/thing
Enter your passphrase: xyz
[in another terminal: setxkbmap us / loadkeys us]
Enter new passphrase: xyz (in reality: xzy or whatever since you changed keymap)
Repeat new passphrase: xyz (~)

henceforth LUKS accepts your passphrase in either keymap. Also useful when using recovery CDs and such that might not offer your preferred keymap.

esa

Member

Registered: 2011-12-29

Posts: 143

Website

Re: LUKS don't recognize my correct passphrase

You could add the keymap setting to the GRUB line (/etc/default/grub, then rebuild the grub.cfg according to your non-/UEFI machine) so in case you dont want to just boot to multiuser, it'll just ask the encrpytion password and will continue booting to GUI.

hth

Last edited by esa (2015-08-24 00:31:55)

---

Author of: TUI (Text User Interface for scripts), VHS (Video Handler Script, using ffmpeg) and YASSI (Yet Another Simple Script Installer)