Arch Linux

lowspeedpursuit

Member

Registered: 2019-10-04

Posts: 8

[SOLVED] Systemd 243 won't decrypt non-root crypttab entry w/ keyfile

After updating to systemd 243.51-1, I get an error on boot about failing to mount my encrypted drive because it doesn't exist in /dev/mapper, and then obviously I can't access the drive. No errors about failing to decrypt. No changes to /etc/crypttab, etc. Crypttab entry specifies a keyfile on an external USB drive used as a hardware key. After booting, I can manually decrypt the drive using the keyfile and access the drive as expected. If I change the crypttab entry to prompt for the slot 2 password instead of using the keyfile, I can enter the password at boot and everything works as expected. If I manually downgrade to systemd 242.84-2, the drive is decrypted and mounted on boot with the original crypttab entry as expected.

Is a configuration change necessary on my end to continue using my keyfile-based crypttab entry? Is this an upstream systemd bug? Am I an idiot?
Thank you for your time.

Last edited by lowspeedpursuit (2019-10-05 01:26:11)

loqs

Member

Registered: 2014-03-06

Posts: 19,100

Re: [SOLVED] Systemd 243 won't decrypt non-root crypttab entry w/ keyfile

https://bugs.archlinux.org/task/63880 ?

lowspeedpursuit

Member

Registered: 2019-10-04

Posts: 8

Re: [SOLVED] Systemd 243 won't decrypt non-root crypttab entry w/ keyfile

Yep, that's my issue to a T. So it looks like until upstream makes some progress, keyfiles in the bootsector / extra-partition area of certain drives that are accessed with the "offset" option rather than an actual file can't be used to reliably decrypt on boot, since both the static paths to my hardware key use colons.

I'll keep an eye on those bug reports, thank you for your help!

progandy

Member

Registered: 2012-05-17

Posts: 5,322

Re: [SOLVED] Systemd 243 won't decrypt non-root crypttab entry w/ keyfile

You could maybe add udev rules that create stable paths without colons.

Last edited by progandy (2019-10-04 19:07:02)

---

| alias CUTF='LANG=en_XX.UTF-8@POSIX ' | alias ENGLISH='LANG=C.UTF-8 ' |

lowspeedpursuit

Member

Registered: 2019-10-04

Posts: 8

Re: [SOLVED] Systemd 243 won't decrypt non-root crypttab entry w/ keyfile

Good call. I've never written udev rules before, but it was relatively straightforward, and with the cleaner path everything is working as expected even on new systemd.

I'm not sure how you generally do this here, but I've edited my post title to mark this issue solved.

Thanks again.