padlock-sha? Why error on boot?

sveinemann · 2008-02-10 20:21:11

Hi
Im using luks encrypted root and storage, so right after booting (pressing in my password) it says something about not finding the module padlock-sha? Why? I mean, since it boots fine and unlocks the volumes.

byte · 2008-02-12 04:57:27

Same here, with encrypted swap only.

YscO · 2008-02-12 11:57:38

Same here, seems to be something with the new kernel

http://groups.google.com/group/linux.de … 0?lnk=raot

sveinemann · 2008-02-12 13:12:48

Thats wired, thanks for the link tough. But it doesnt solve the problem, this is my laptop i use @ work. I cant risk it dying. Everything does work, for now, and thats the important part.

gothmog.todi · 2008-02-12 13:39:01

I get the same warning, with everything encrypted except boot. There don't seem to be any consequences though.

aneiser · 2008-10-09 09:40:16

If you're able to read & understand German, the solution is here: http://wiki.archlinux.de/?title=Festpla … lermeldung, but I give you a short summary (be REALLY careful and HAVE a FALLBACK image to boot):
First find out what modules your crypto system needs by comparing the output of

cd /lib/modules/$(uname -r)
source /lib/initcpio/functions 
m="$(all_modules "/crypto/") "
echo $m

and

lsmod

Then edit your /etc/mkinitcpio.conf (as root) and add a line containing all your needed modules, e.g. my line looks like

CRYPTO_MODULES="xts aes_i586 aes_generic"

This way you tell the hook "encrypt" not to load unneccessary modules, BUT if you forget one needed module, the unlocking of your crypted device won't work. So just imagine what happens if you can't unlock your crypted root on boot, then: Use your fallback image!
The last step is to update your image by issuing (as root)

mkinitcpio -g /boot/kernel26.img

Now it's possible that udev tries to load the padlock modules, so just blacklist them by creating a file (call it e.g. padlock) in the directory /etc/modprobe.d/ and add the following contents:

blacklist padlock-aes
blacklist padlock-sha

Hope this helps.

fukawi2 · 2008-10-09 11:53:53

An easier solution is to add this to your /etc/modprobe.conf

blacklist padlock_aes
blacklist padlock_sha

That's what I've done on my laptop after I migrated my /home partition to be encrypted this afternoon. All working OK

apaige · 2008-10-09 13:49:44

You do want the padlock modules if your laptop has a VIA CPU.

fukawi2 · 2008-10-09 21:41:22

apaige wrote:

You do want the padlock modules if your laptop has a VIA CPU.

In which case the errors shouldn't be appearing, no?

byte · 2008-10-09 21:41:39

apaige: Sure, but with a VIA cpu you also don't get those error messages as those modules will load just fine. ;-)

aneiser · 2008-10-10 13:05:02

fukawi2 wrote:

An easier solution is to add this to your /etc/modprobe.conf
blacklist padlock_aes
blacklist padlock_sha
That's what I've done on my laptop after I migrated my /home partition to be encrypted this afternoon. All working OK

No, for me *only* blacklisting the modules did not help since the encrypt hook tries to load all modules with its own routine and blacklisting is not respected. So only the combination of blacklisting *and* telling the encrypt-hook what modules you need solved the problem for me.

rabinhood · 2010-10-07 22:26:01

In my case the change of modules list in mkinitcpio.conf alone helped, with no change in modprobe.conf. And it's true that you have to be very careful and remember to add all the used modules in CRYPTO_MODULES line. I forgot to add one, and ended with maintance from USB drive.
Thanks!

jasonwryan · 2010-10-07 23:13:15

rabinhood: please don't necro-bump http://wiki.archlinux.org/index.php/For … Bumping.27

Closing

Arch Linux

#1 2008-02-10 20:21:11

padlock-sha? Why error on boot?

#2 2008-02-12 04:57:27

Re: padlock-sha? Why error on boot?

#3 2008-02-12 11:57:38

Re: padlock-sha? Why error on boot?

#4 2008-02-12 13:12:48

Re: padlock-sha? Why error on boot?

#5 2008-02-12 13:39:01

Re: padlock-sha? Why error on boot?

#6 2008-10-09 09:40:16

Re: padlock-sha? Why error on boot?

#7 2008-10-09 11:53:53

Re: padlock-sha? Why error on boot?

#8 2008-10-09 13:49:44

Re: padlock-sha? Why error on boot?

#9 2008-10-09 21:41:22

Re: padlock-sha? Why error on boot?

#10 2008-10-09 21:41:39

Re: padlock-sha? Why error on boot?

#11 2008-10-10 13:05:02

Re: padlock-sha? Why error on boot?

#12 2010-10-07 22:26:01

Re: padlock-sha? Why error on boot?

#13 2010-10-07 23:13:15

Re: padlock-sha? Why error on boot?

Board footer