Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #239316 > unrolled thread

LUKS encryption help

Started bydetrito@tuta.io
First post2021-08-26 04:00 +0200
Last post2021-08-27 17:10 +0200
Articles 7 — 6 participants

Back to article view | Back to linux.debian.user


Contents

  LUKS encryption help detrito@tuta.io - 2021-08-26 04:00 +0200
    Re: LUKS encryption help David Wright <deblis@lionunicorn.co.uk> - 2021-08-26 05:50 +0200
    Re: LUKS encryption help piorunz <piorunz@gmx.com> - 2021-08-26 15:30 +0200
      Re: LUKS encryption help piorunz <piorunz@gmx.com> - 2021-08-26 16:10 +0200
    Re: LUKS encryption help David Christensen <dpchrist@holgerdanske.com> - 2021-08-26 16:50 +0200
    Re: LUKS encryption help David <bouncingcats@gmail.com> - 2021-08-27 14:00 +0200
    Re: LUKS encryption help Jochen Spieker <ml@well-adjusted.de> - 2021-08-27 17:10 +0200

#239316 — LUKS encryption help

Fromdetrito@tuta.io
Date2021-08-26 04:00 +0200
SubjectLUKS encryption help
Message-ID<CQcQq-Mf-3@gated-at.bofh.it>
Good evening,

I'm having some worrying problems with LUKS my Debian 10 installation on an external hard drive. As I'm not very technical, I'll try to explain what I did and what is happening now in chronological order.

Around May I installed Debian 10 on my (external) hard drive in BIOS (not UEFI) mode for backup purposes. In the end of June I took the drive out of the drawer and tried to boot into it but to my surprise my LUKS encryption password does not work anymore.
I'm very sure I am typing it right because I had written it into a piece of paper. I have tried to unlock and mount it inside my OS (Manjaro) instead of booting it directly but it also didn't work, and I have also tried to boot in Recovery Mode but to no avail. Every time I type in my password it says it's wrong ("Bad password or options" or someting like that). 

Please help. I have many important documents and pictures inside that drive.
Sorry for my badEnglish.

[toc] | [next] | [standalone]


#239317

FromDavid Wright <deblis@lionunicorn.co.uk>
Date2021-08-26 05:50 +0200
Message-ID<CQeyS-29i-1@gated-at.bofh.it>
In reply to#239316
On Thu 26 Aug 2021 at 03:37:54 (+0200), detrito@tuta.io wrote:

> Around May I installed Debian 10 on my (external) hard drive in BIOS (not UEFI) mode for backup purposes. In the end of June I took the drive out of the drawer and tried to boot into it but to my surprise my LUKS encryption password does not work anymore.

I presume that you have unlocked it successfully in the past.

> I'm very sure I am typing it right because I had written it into a piece of paper. I have tried to unlock and mount it inside my OS (Manjaro) instead of booting it directly but it also didn't work, and I have also tried to boot in Recovery Mode but to no avail. Every time I type in my password it says it's wrong ("Bad password or options" or someting like that). 
> 
> Please help. I have many important documents and pictures inside that drive.
> Sorry for my badEnglish.

Is there anything on your system(s) that has changed, and could have
affected how the keyboard language and layout is defined?
This is particularly important if your passphrase contains accented
letters, or punctuation that different keyboards place in different
places (like @ # ~ quotation marks etc).

When you try to boot it from a running system, do the logs show any
errors with reading the disk?

Cheers,
David.

[toc] | [prev] | [next] | [standalone]


#239334

Frompiorunz <piorunz@gmx.com>
Date2021-08-26 15:30 +0200
Message-ID<CQnC9-8nq-1@gated-at.bofh.it>
In reply to#239316
On 26/08/2021 02:37, detrito@tuta.io wrote:

my LUKS encryption password does not work anymore.

Can you paste system logs showing that, so we know *why* it doesn't work

I have tried to unlock and mount it inside my OS (Manjaro) instead of
booting it directly but it also didn't work

Again, we can't tell why it doesn't work without logs

Every time I type in my password it says it's wrong ("Bad password or
options" or someting like that).

That's not much of a help to be honest :)

Please try to gather logs and come back to us.

--

With kindest regards, piorunz.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄⠀⠀⠀⠀

[toc] | [prev] | [next] | [standalone]


#239336

Frompiorunz <piorunz@gmx.com>
Date2021-08-26 16:10 +0200
Message-ID<CQoeS-wZ-7@gated-at.bofh.it>
In reply to#239334
Sorry about no quotes in my previous message. I don't know where did
they went? ;)

[toc] | [prev] | [next] | [standalone]


#239339

FromDavid Christensen <dpchrist@holgerdanske.com>
Date2021-08-26 16:50 +0200
Message-ID<CQoRz-Ub-5@gated-at.bofh.it>
In reply to#239316
On 8/25/21 6:37 PM, detrito@tuta.io wrote:
> Good evening,
> 
> I'm having some worrying problems with LUKS my Debian 10 installation on an external hard drive. As I'm not very technical, I'll try to explain what I did and what is happening now in chronological order.
> 
> Around May I installed Debian 10 on my (external) hard drive in BIOS (not UEFI) mode for backup purposes. In the end of June I took the drive out of the drawer and tried to boot into it but to my surprise my LUKS encryption password does not work anymore.
> I'm very sure I am typing it right because I had written it into a piece of paper. I have tried to unlock and mount it inside my OS (Manjaro) instead of booting it directly but it also didn't work, and I have also tried to boot in Recovery Mode but to no avail. Every time I type in my password it says it's wrong ("Bad password or options" or someting like that).
> 
> Please help. I have many important documents and pictures inside that drive.
> Sorry for my badEnglish.


Please tell us:

1.  What is the make and model of the external hard drive?

2.  What ISO image did you use to install Debian onto the external hard 
drive?  What media did you put the Debian installer onto?  Do you still 
have the Debian installer media?

3.  When did you install Debian?  What choices did you make?

4.  What is the make, model, and CPU of the computer you used to install 
Debian?

5.  What is the make, model, and CPU of the computer you are now using 
to boot Debian?

6.  Have you updated/ upgraded Debian since installing it?  Did you 
reboot every time and verify it still worked?


It would be wise to run diagnostic tests on the external hard drive. 
HDD manufacturers used to offer bootable CD and/or USB tool kits for 
their products, but I have not had much luck with these the past few 
years.  The FOSS alternative is a working Linux or FreeBSD installation 
or live disk, and smartctl:

     https://linux.die.net/man/8/smartctl


I have a half dozen x86_64 (e.g. "amd64") computers that use 2.5" SATA 
drives.  I have more than a dozen 2.5" SATA SSD's with various operating 
system images.  I like to mix and match.  I keep my boot, swap, and root 
partitions small (less than "16 GB" total for Debian) and put my bulk 
data on HDD's in RAID on a file server.  I take raw binary images of the 
OS devices periodically and whenever I make significant changes (prior 
to major upgrade, after fresh install, etc.).


About a year ago, I upgraded the kernel on a Debian 9 image and LUKS 
refused to accept the correct passphrase at boot when the SSD was 
installed in one particular machine (the same SSD worked correctly in 
other machines).  My conclusion was that there was a bug in the upgraded 
kernel that interacted badly with the chipset in that computer.  The 
short-term work-around was to boot the earlier kernel.  The long-term 
solution was to re-image the SSD from the last backup image and wait for 
the next kernel upgrade.  It took ~6 months and a few more kernel 
upgrades before the bug was fixed.  I re-imaged several times.  (Hint: 
you want to get good at backup/ restore, archiving, and imaging).


Does the boot screen offer multiple kernel choices?  Have you tried them 
all?


If none of the kernel choices work, try booting the Debian installer 
media, navigate into a recovery console, opening the LUKS container(s), 
mounting the filesystem(s), and backing up the data.


David

[toc] | [prev] | [next] | [standalone]


#239358

FromDavid <bouncingcats@gmail.com>
Date2021-08-27 14:00 +0200
Message-ID<CQIGC-51D-19@gated-at.bofh.it>
In reply to#239316
On Thu, 26 Aug 2021 at 11:54, <detrito@tuta.io> wrote:
>
> Good evening,
>
> I'm having some worrying problems with LUKS my Debian 10 installation on an external hard drive. As I'm not very technical, I'll try to explain what I did and what is happening now in chronological order.
>
> Around May I installed Debian 10 on my (external) hard drive in BIOS (not UEFI) mode for backup purposes. In the end of June I took the drive out of the drawer and tried to boot into it but to my surprise my LUKS encryption password does not work anymore.
> I'm very sure I am typing it right because I had written it into a piece of paper. I have tried to unlock and mount it inside my OS (Manjaro) instead of booting it directly but it also didn't work, and I have also tried to boot in Recovery Mode but to no avail. Every time I type in my password it says it's wrong ("Bad password or options" or someting like that).

Let's see exactly what you are doing in Manjaro to try to open
the LUKS drive.

As root in a terminal on Manjaro, please copy and paste into a reply
email the output of
  lsblk -f
command, before connecting the LUKS drive, and again after
connecting it.

("lsblk" contains two lower-case letter L)

The above command output will show the name of the drive,
and it will  look something like sdX.

Please copy and paste into a reply email the output of the below
commands with the drive connected. You will need to repace sdX
with the name seen above for your drive.

  cryptsetup --version

  cryptsetup -v isLuks --type luks1 /dev/sdX

  cryptsetup -v isLuks --type luks2 /dev/sdX

When copy and pasting, be sure to include the command that
you entered, with its output immediately underneath, so that we
can see the command that generated the output.

In the same manner, please show us the command you are typing
to try to open the drive in Manjaro, together with its exact output.

[toc] | [prev] | [next] | [standalone]


#239359

FromJochen Spieker <ml@well-adjusted.de>
Date2021-08-27 17:10 +0200
Message-ID<CQLEu-74i-23@gated-at.bofh.it>
In reply to#239316

[Multipart message — attachments visible in raw view] — view raw

detrito@tuta.io:
> 
> Around May I installed Debian 10 on my (external) hard drive in BIOS
> (not UEFI) mode for backup purposes. In the end of June I took the
> drive out of the drawer and tried to boot into it but to my surprise
> my LUKS encryption password does not work anymore.  I'm very sure I am
> typing it right because I had written it into a piece of paper.

Are you completely sure that you wrote that password down correctly and
that you are reading it correctly? Can you distinguish l and 1, O and 0
etc? Is there any invisible whitespace? Did you intentionally leave
something out because you feared somebody could find that piece of
paper?

> Please help. I have many important documents and pictures inside that
> drive.

Please use your current fear as impetus for setting up a proper backup
solution. Hardware dies, software is buggy, humans make mistakes,
catastrophes happen.

J.
-- 
I am worried that my dreams pale in comparison beside TV docu-soaps.
[Agree]   [Disagree]
                 <http://archive.slowlydownward.com/NODATA/data_enter2.html>

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web