Arch Linux

bradyr911

Member

Registered: 2021-04-25

Posts: 3

setting up new arch install with encrypted drive, getting kernel panic

Hello everyone, i've been following the dm-crypt with secure boot and tpm2 setup guide on the wiki, and i'm unsure what i should be putting in my cmdline files for the initramfs

So far i've just tried setting the root device to equal the UUID of the encrypted drive (which obviously didn't work)

i made the /etc/kernel/cmdline file contain the following

cryptdevice=UUID=<UUID>:cryptroot root=/dev/mapper/root rw quiet

<UUID> being replaced with the actual partitions uuid

if anyone else has done this setup before, any help would be appreciated

cryptearth

Member

Registered: 2024-02-03

Posts: 1,223

Re: setting up new arch install with encrypted drive, getting kernel panic

the wiki should have all infos: https://wiki.archlinux.org/title/Dm-cry … ire_system

MickeyRat

Member

Registered: 2011-11-15

Posts: 133

Re: setting up new arch install with encrypted drive, getting kernel panic

I have a laptop that's setup like that.  Though I didn't use secure boot.  It looks like you're using LVM on a LUKS encrypted drive.  If I'm right that cryptroot should be cryptlvm.  Like this:

cryptdevice=UUID=<UUID>:cryptlvm root=/dev/mapper/root rw quiet

If you're using an SSD, you might want to consider allowing discards. Then the line becomes:

cryptdevice=UUID=<UUID>:cryptlvm:allow-discards root=/dev/mapper/root rw quiet

At least that's what worked for me.  That allow-discards only affects LUKS.  You also need to add a issue_discards = 1 to /etc/lvm/lvm.conf to get it to work in LVM.

---

Some cause happiness wherever they go; others whenever they go.
- Oscar Wilde

Sving1024

Member

Registered: 2024-06-16

Posts: 31

Website

Re: setting up new arch install with encrypted drive, getting kernel panic

Try

cryptdevice=UUID=<UUID>:cryptroot root=/dev/mapper/cryptroot rw quiet

The name after /dev/mapper should be the same as the name in the cryptdevice entry.

See https://wiki.archlinux.org/title/Dm-cry … parameters for details.