You are not logged in.

#1 2012-11-13 12:22:31

tlamer
Member
From: Bratislava, Slovakia.
Registered: 2010-02-04
Posts: 42

[SOLVED] full disk encryption

Hi,

i have bought myself a new laptop and i want to install arch with full disk encryption on it. I tried to do the installation in virtual machine to see how it works. I have followed the wiki (installation guide and LUKS).

my setup:

  • /dev/sda1 unencrypted /boot    /dev/sda2 encrypted /     /dev/sda5 encrypted /home      /dev/sda6  encrypted swap

  • mkinitcpio.conf: HOOKS="base udev autodetect pata scsi  sata encrypt filesystems usbinput fsck"

  • syslinux.cfg: APPEND cryptdevice=/dev/sda2:cryptroot root=/dev/mapper/cryptroot ro

  • fstab: /dev/mapper/cryptroot    /     ext4    rw,relatime,data=ordered      0  2

after reboot i got these messages: scrot

Any idea what have I forgot or did wrong?

Thanks

Last edited by tlamer (2012-11-13 13:06:28)


:wq

Offline

#2 2012-11-13 13:02:46

falconindy
Developer
From: New York, USA
Registered: 2009-10-22
Posts: 4,111
Website

Re: [SOLVED] full disk encryption

Mkinitcpio.conf looks fine. Its a bit odd that you're never prompted for a passphrase and that you don't have a cryptkey specified. Can you post he output of lsinitcpio -a for the image?

FYI fstab is irrelevant when talking about early userspace.

Last edited by falconindy (2012-11-13 13:04:46)

Offline

#3 2012-11-13 13:05:54

Lero
Member
Registered: 2012-11-13
Posts: 1

Re: [SOLVED] full disk encryption

I'm no expert on those things, although i have to ask if you did use LVM along with LUKS ?

According to wiki https://wiki.archlinux.org/index.php/Dm … _LVM_setup for volume to mount early in boot process you have to add "lvm2" hook in mkinitcpio.conf.

Offline

#4 2012-11-13 13:06:00

tlamer
Member
From: Bratislava, Slovakia.
Registered: 2010-02-04
Posts: 42

Re: [SOLVED] full disk encryption

ow... i have found the error few minutes ago... i had two typos.. one in crypttab and one in syslinux.cfg..


:wq

Offline

#5 2012-11-13 13:08:12

tlamer
Member
From: Bratislava, Slovakia.
Registered: 2010-02-04
Posts: 42

Re: [SOLVED] full disk encryption

Lero wrote:

I'm no expert on those things, although i have to ask if you did use LVM along with LUKS ?

According to wiki https://wiki.archlinux.org/index.php/Dm … _LVM_setup for volume to mount early in boot process you have to add "lvm2" hook in mkinitcpio.conf.

you need to add lvm2 only if you use LVM on LUKS on vice versa. I did not used LVM, so it wasnt necessary for me...

Anyway... this thread wont be much useful... can i delete it?

Last edited by tlamer (2012-11-13 13:08:57)


:wq

Offline

Board footer

Powered by FluxBB