Arch Linux

ebal

Member

From: Athens, Greece

Registered: 2009-05-26

Posts: 224

Website

cryptsetup luks boot mkinitcpio usb stick encrypted

Hi,

I am using cryptsetup and LUKS for encrypting my home partition.
Till now i've used ASK for PASSWORD in /etc/crypttab

But i wanted to use a usb stick for storing a key.

Reading https://wiki.archlinux.org/index.php/LUKS
I successfully have created i key, i added it with luksAddkey and everything seems to be ok.
I have a vfat usb stick that i have copied to the keyfile.

I did my tests, and its works fine.

So, i tweaked my /boot/grub/menu with this:

kernel /boot/vmlinuz26 root=/dev/sda3 ro cryptkey=/dev/disk/by-uuid/D74E-9973:vfat:keyfile cryptdevice=/dev/sda4:encrypted

I have edit /etc/mkinitcpio.conf to add some kernel modules and encrypt hook
and created a new kernel image for safety (i want to have a failsafe kernel image too);

base udev autodetect pata scsi sata encrypt filesystems

the problem is that: poll_device "${ckdev}" is failed (line 24 in encrypt hook) and i am reading
"Keyfile could not be opened. Reverting to passphrase"

I've hacked a little the encrypt hook to debug why poll_device is failing, but i cant figured it out.

The rootdelay is 10sec already.

It seems that my usb device cant be recognized from udev hook (Before encrypt) and my kernel image dont seem to find the external usb stick.

Any help would be appreciated it.

PS: Sorry for my bad english

---

https://balaskas.gr
Linux System Engineer - Registered Linux User #420129