Arch Linux

Biboozz

Member

Registered: 2016-10-18

Posts: 64

[SOLVED] Luks on LVM + GRUB: No such device

Greetings, i made a fex mistakes with my previous system so i need to reinstall today, my previous arcyhlinux was based on LUKS over LVM and i worked really fine.
Now i'm trying to reinstall it the same way following ArchWiki LuksOnLvm and ArchWiki Installation Guide but when i try to boot i have a grub rescue shell without event a luks decryption prompt:

error: no such device: bbf25445-5c3e ...
error: unknown filesystem
Entering rescue mode...
grub rescue>

I'm trying to fix it since 3 days i i'm getting mad. tahnks for your help, here are my configuration files:

My system use EFI

Partition scheme

NAME                 FSTYPE      LABEL    UUID                                   FSAVAIL FSUSE% MOUNTPOINT
loop0                squashfs                                                          0   100% /run/miso/sfs/livefs
loop1                squashfs                                                          0   100% /run/miso/sfs/rootfs
sda                                                                                             
├─sda1               vfat                 7E1A-5BBA                                             
├─sda2               vfat                 EADF-92BA                                             
├─sda3                                                                                          
└─sda4               ntfs                 5A60E5AB60E58DD7                                      
sdb                                                                                             
├─sdb1               vfat                 E3E8-FD16                               508.8M     0% /mnt/efi
└─sdb2               LVM2_member          vdr9So-csqi-fpcq-rtw0-I4qG-TFOO-RV8KJf                
  ├─arch_crypto-root crypto_LUKS          f44f5e78-d741-4872-a404-ded15b4c7519                  
  │ └─root           ext4                 bbf25445-5c3e-4bd9-ae0c-b7964a98534d    117.5G     1% /mnt
  ├─arch_crypto-swap                                                                            
  ├─arch_crypto-tmp                                                                             
  └─arch_crypto-home crypto_LUKS          8ba388ad-ff83-4b78-afbc-aea53cfb5794                  
    └─home           ext4                 d1747ae3-eb62-495e-bea9-b55aa7374e4a    324.6G     0% /mnt/home
sdc                                                                                             
└─sdc1                                                                                          
sdd                  iso9660     MJRO1810 2019-09-13-17-39-25-00                                
├─sdd1               iso9660     MJRO1810 2019-09-13-17-39-25-00                       0   100% /run/miso/bootmnt
└─sdd2               vfat        MISO_EFI 204F-0ACB                                             
sde                  vfat        32G USB  CA5C-0D36                                29.4G     0% /mnt/usb

/etc/crypttab

# Configuration for encrypted block devices.
# See crypttab(5) for details.

# NOTE: Do not list your root (/) partition here, it must be set up
#       beforehand by the initramfs (/etc/mkinitcpio.conf).

# <name>       <device>                                     <password>              <options>
# home         UUID=b8ad5c18-f445-495d-9095-c9ec4f9d2f37    /etc/mypassword1
# data1        /dev/sda3                                    /etc/mypassword2
# data2        /dev/sda5                                    /etc/cryptfs.key
# swap         /dev/sdx4                                    /dev/urandom            swap,cipher=aes-cbc-essiv:sha256,size=256
# vol          /dev/sdb7                                    none

home		/dev/arch_crypto/home			/etc/luks-keys/home
swap		/dev/arch_crypto/swap			/dev/urandom		    swap,cipher=aes-cbc-essiv:sha256,size=256
tmp		/dev/arch_crypto/tmp			/dev/urandom		    tmp,cipher=aes-cbc-essiv:sha256,size=256

/etc/fstab

/dev/mapper/root	/	ext4	defaults	0	1
/dev/sdb		/efi	vfat	defaults	0	2
/dev/mapper/swap	none	swap	sw		0	0
/dev/mapper/tmp		/tmp	tmpfs	defaults	0	0

/etc/mkinitcpio.conf

# vim:set ft=sh
# MODULES
# The following modules are loaded before any boot hooks are
# run.  Advanced users may wish to specify all system modules
# in this array.  For instance:
#     MODULES=(piix ide_disk reiserfs)
MODULES=()

# BINARIES
# This setting includes any additional binaries a given user may
# wish into the CPIO image.  This is run last, so it may be used to
# override the actual binaries included by a given hook
# BINARIES are dependency parsed, so you may safely ignore libraries
BINARIES=()

# FILES
# This setting is similar to BINARIES above, however, files are added
# as-is and are not parsed in any way.  This is useful for config files.
FILES=()

# HOOKS
# This is the most important setting in this file.  The HOOKS control the
# modules and scripts added to the image, and what happens at boot time.
# Order is important, and it is recommended that you do not change the
# order in which HOOKS are added.  Run 'mkinitcpio -H <hook name>' for
# help on a given hook.
# 'base' is _required_ unless you know precisely what you are doing.
# 'udev' is _required_ in order to automatically load modules
# 'filesystems' is _required_ unless you specify your fs modules in MODULES
# Examples:
##   This setup specifies all modules in the MODULES setting above.
##   No raid, lvm2, or encrypted root is needed.
#    HOOKS=(base)
#
##   This setup will autodetect all modules for your system and should
##   work as a sane default
#    HOOKS=(base udev autodetect block filesystems)
#
##   This setup will generate a 'full' image which supports most systems.
##   No autodetection is done.
#    HOOKS=(base udev block filesystems)
#
##   This setup assembles a pata mdadm array with an encrypted root FS.
##   Note: See 'mkinitcpio -H mdadm' for more information on raid devices.
#    HOOKS=(base udev block mdadm encrypt filesystems)
#
##   This setup loads an lvm2 volume group on a usb device.
#    HOOKS=(base udev block lvm2 filesystems)
#
##   NOTE: If you have /usr on a separate partition, you MUST include the
#    usr, fsck and shutdown hooks.
HOOKS=(base udev autodetect keyboard keymap modconf block encrypt lvm2 filesystems fsck)

# COMPRESSION
# Use this to compress the initramfs image. By default, gzip compression
# is used. Use 'cat' to create an uncompressed image.
#COMPRESSION="gzip"
#COMPRESSION="bzip2"
#COMPRESSION="lzma"
#COMPRESSION="xz"
#COMPRESSION="lzop"
#COMPRESSION="lz4"

# COMPRESSION_OPTIONS
# Additional options for the compressor
#COMPRESSION_OPTIONS=()

/etc/default/grub

# GRUB boot loader configuration

GRUB_DEFAULT=0
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="Arch"
GRUB_CMDLINE_LINUX_DEFAULT="loglevel=3 quiet cryptdevice=UUID=f44f5e78-d741-4872-a404-ded15b4c7519:root root=/dev/mapper/root"
GRUB_CMDLINE_LINUX=""

# Preload both GPT and MBR modules so that they are not missed
GRUB_PRELOAD_MODULES="part_gpt part_msdos"

# Uncomment to enable booting from LUKS encrypted devices
#GRUB_ENABLE_CRYPTODISK=y

# Set to 'countdown' or 'hidden' to change timeout behavior,
# press ESC key to display menu.
GRUB_TIMEOUT_STYLE=menu

# Uncomment to use basic console
GRUB_TERMINAL_INPUT=console

# Uncomment to disable graphical terminal
#GRUB_TERMINAL_OUTPUT=console

# The resolution used on graphical terminal
# note that you can use only modes which your graphic card supports via VBE
# you can see them in real GRUB with the command `vbeinfo'
GRUB_GFXMODE=auto

# Uncomment to allow the kernel use the same resolution used by grub
GRUB_GFXPAYLOAD_LINUX=keep

# Uncomment if you want GRUB to pass to the Linux kernel the old parameter
# format "root=/dev/xxx" instead of "root=/dev/disk/by-uuid/xxx"
#GRUB_DISABLE_LINUX_UUID=true

# Uncomment to disable generation of recovery mode menu entries
GRUB_DISABLE_RECOVERY=true

# Uncomment and set to the desired menu colors.  Used by normal and wallpaper
# modes only.  Entries specified as foreground/background.
#GRUB_COLOR_NORMAL="light-blue/black"
#GRUB_COLOR_HIGHLIGHT="light-cyan/blue"

# Uncomment one of them for the gfx desired, a image background or a gfxtheme
#GRUB_BACKGROUND="/path/to/wallpaper"
#GRUB_THEME="/path/to/gfxtheme"

# Uncomment to get a beep at GRUB start
#GRUB_INIT_TUNE="480 440 1"

# Uncomment to make GRUB remember the last selection. This requires
# setting 'GRUB_DEFAULT=saved' above.
#GRUB_SAVEDEFAULT="true"

/boot/grub/grub.cfg

#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
insmod part_gpt
insmod part_msdos
if [ -s $prefix/grubenv ]; then
  load_env
fi
if [ "${next_entry}" ] ; then
   set default="${next_entry}"
   set next_entry=
   save_env next_entry
   set boot_once=true
else
   set default="0"
fi

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then
  set saved_entry="${prev_saved_entry}"
  save_env saved_entry
  set prev_saved_entry=
  save_env prev_saved_entry
  set boot_once=true
fi

function savedefault {
  if [ -z "${boot_once}" ]; then
    saved_entry="${chosen}"
    save_env saved_entry
  fi
}

function load_video {
  if [ x$feature_all_video_module = xy ]; then
    insmod all_video
  else
    insmod efi_gop
    insmod efi_uga
    insmod ieee1275_fb
    insmod vbe
    insmod vga
    insmod video_bochs
    insmod video_cirrus
  fi
}

if [ x$feature_default_font_path = xy ] ; then
   font=unicode
else
insmod ext2
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root  bbf25445-5c3e-4bd9-ae0c-b7964a98534d
else
  search --no-floppy --fs-uuid --set=root bbf25445-5c3e-4bd9-ae0c-b7964a98534d
fi
    font="/usr/share/grub/unicode.pf2"
fi

if loadfont $font ; then
  set gfxmode=auto
  load_video
  insmod gfxterm
  set locale_dir=$prefix/locale
  set lang=en_US
  insmod gettext
fi
terminal_input console
terminal_output gfxterm
if [ x$feature_timeout_style = xy ] ; then
  set timeout_style=menu
  set timeout=5
# Fallback normal timeout code in case the timeout_style feature is
# unavailable.
else
  set timeout=5
fi
### END /etc/grub.d/00_header ###

### BEGIN /etc/grub.d/10_linux ###
menuentry 'Arch Linux' --class arch --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-bbf25445-5c3e-4bd9-ae0c-b7964a98534d' {
	load_video
	set gfxpayload=keep
	insmod gzio
	insmod ext2
	if [ x$feature_platform_search_hint = xy ]; then
	  search --no-floppy --fs-uuid --set=root  bbf25445-5c3e-4bd9-ae0c-b7964a98534d
	else
	  search --no-floppy --fs-uuid --set=root bbf25445-5c3e-4bd9-ae0c-b7964a98534d
	fi
	echo	'Loading Linux linux ...'
	linux	/boot/vmlinuz-linux root=UUID=bbf25445-5c3e-4bd9-ae0c-b7964a98534d rw  loglevel=3 quiet cryptdevice=UUID=f44f5e78-d741-4872-a404-ded15b4c7519:root root=/dev/mapper/root
	echo	'Loading initial ramdisk ...'
	initrd	/boot/initramfs-linux.img
}
submenu 'Advanced options for Arch Linux' $menuentry_id_option 'gnulinux-advanced-bbf25445-5c3e-4bd9-ae0c-b7964a98534d' {
	menuentry 'Arch Linux, with Linux linux' --class arch --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-linux-advanced-bbf25445-5c3e-4bd9-ae0c-b7964a98534d' {
		load_video
		set gfxpayload=keep
		insmod gzio
		insmod ext2
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root  bbf25445-5c3e-4bd9-ae0c-b7964a98534d
		else
		  search --no-floppy --fs-uuid --set=root bbf25445-5c3e-4bd9-ae0c-b7964a98534d
		fi
		echo	'Loading Linux linux ...'
		linux	/boot/vmlinuz-linux root=UUID=bbf25445-5c3e-4bd9-ae0c-b7964a98534d rw  loglevel=3 quiet cryptdevice=UUID=f44f5e78-d741-4872-a404-ded15b4c7519:root root=/dev/mapper/root
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initramfs-linux.img
	}
	menuentry 'Arch Linux, with Linux linux (fallback initramfs)' --class arch --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-linux-fallback-bbf25445-5c3e-4bd9-ae0c-b7964a98534d' {
		load_video
		set gfxpayload=keep
		insmod gzio
		insmod ext2
		if [ x$feature_platform_search_hint = xy ]; then
		  search --no-floppy --fs-uuid --set=root  bbf25445-5c3e-4bd9-ae0c-b7964a98534d
		else
		  search --no-floppy --fs-uuid --set=root bbf25445-5c3e-4bd9-ae0c-b7964a98534d
		fi
		echo	'Loading Linux linux ...'
		linux	/boot/vmlinuz-linux root=UUID=bbf25445-5c3e-4bd9-ae0c-b7964a98534d rw  loglevel=3 quiet cryptdevice=UUID=f44f5e78-d741-4872-a404-ded15b4c7519:root root=/dev/mapper/root
		echo	'Loading initial ramdisk ...'
		initrd	/boot/initramfs-linux-fallback.img
	}
}

### END /etc/grub.d/10_linux ###

### BEGIN /etc/grub.d/20_linux_xen ###
### END /etc/grub.d/20_linux_xen ###

### BEGIN /etc/grub.d/30_os-prober ###
### END /etc/grub.d/30_os-prober ###

### BEGIN /etc/grub.d/40_custom ###
# This file provides an easy way to add custom menu entries.  Simply type the
# menu entries you want to add after this comment.  Be careful not to change
# the 'exec tail' line above.
### END /etc/grub.d/40_custom ###

### BEGIN /etc/grub.d/41_custom ###
if [ -f  ${config_directory}/custom.cfg ]; then
  source ${config_directory}/custom.cfg
elif [ -z "${config_directory}" -a -f  $prefix/custom.cfg ]; then
  source $prefix/custom.cfg;
fi
### END /etc/grub.d/41_custom ###

Last edited by Biboozz (2019-12-12 15:07:28)

frostschutz

Member

Registered: 2013-11-15

Posts: 1,418

Re: [SOLVED] Luks on LVM + GRUB: No such device

If you end up with "grub rescue" it means that GRUB does not even find its own files.

If your /boot is encrypted, note that grub does not support LUKS2 yet. This is also mentioned in the wiki page you linked.

Biboozz

Member

Registered: 2016-10-18

Posts: 64

Re: [SOLVED] Luks on LVM + GRUB: No such device

Yes my /boot is part of my /root wich is encrypted. I i don't remember encrypting my filesystem using luks1 last time i did it.

So what is the best solution make a separate /boot wich is not encrypted (remembering i have a fat32 /efi already) or encrypted using luks1 or encrypt whole /root using luks 1 ?

But you're right i make totally sense, i'll try to add a /boot partition not encrypted first.

Last edited by Biboozz (2019-12-06 10:44:05)

frostschutz

Member

Registered: 2013-11-15

Posts: 1,418

Re: [SOLVED] Luks on LVM + GRUB: No such device

unless you made it very tiny, efi partition works fine as boot partition

Biboozz

Member

Registered: 2016-10-18

Posts: 64

Re: [SOLVED] Luks on LVM + GRUB: No such device

Yes it was idiot but i was this, grub was unable to load boot partition because it was in my encrypted /root partition, with the following scheme i work like a charm:

# lsblk
NAME                  MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sdb                     8:16   0 489.1G  0 disk  
├─sdb1                  8:17   0   512M  0 part  /efi
└─sdb2                  8:18   0 488.6G  0 part  
  ├─arch_crypted-boot 254:0    0   512M  0 lvm   /boot
  ├─arch_crypted-root 254:1    0   128G  0 lvm   
  │ └─root            254:5    0   128G  0 crypt /
  ├─arch_crypted-swap 254:2    0     8G  0 lvm   
  │ └─swap            254:6    0     8G  0 crypt 
  ├─arch_crypted-tmp  254:3    0     4G  0 lvm   
  │ └─tmp             254:7    0     4G  0 crypt /tmp
  └─arch_crypted-home 254:4    0   348G  0 lvm   
    └─home            254:8    0   348G  0 crypt /home

Last edited by Biboozz (2019-12-12 15:07:03)