Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #198161

luks, crypttab: why 3 partition only 2 passphrases entered

Show all headers | View raw

Hi,

I have a Debian Stretch and recently I added a new cyphered partition.
All works well but I don't understand why and it's bothering me.

Setup:
$ cat /etc/crypttab
m2_root_crypt UUID=4e655198-a111-... none luks,discard
m2_swap_crypt UUID=56485640-8a04-... none luks,discard
ssd_dades_crypt UUID=8d1d855d-17a7-... none luks,discard

All three partitions have the same passphrase.

On restart I'm asked for two passwords:
m2_root_crypt
m2_swap_crypt

The question is:
"Please unlock disk m2_root_crypt:"

I expcted to write the password three times.

My only theory is that after the root partition is decyphered it's also
mounted and then systemd-ask-password is used somehow (how?) and
--keyname= is used to "Configure a kernel keyring key name". I haven't
tested or seen scripts that do this.

I'm reading initrd scripts/local-top/cryptroot and bin/cryptoot-unlock
(where I can see the string "Please unlock disk") and I don't see
anything like this happening. Maybe initrd lib/cryptsetup/askpass is
doing it?

A question would be:
a) How to enter the passphrase only once?
b) When/where (scripts) and how is the passphrase stored?

This is just to know as the system is working perfectly.

Thanks for reading all of this!

-- 
Carles Pina i Estany
	Web: http://pinux.info || Blog: http://pintant.cat
	GPG Key 0x8CD5C157

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-02 01:00 +0200
  Re: luks, crypttab: why 3 partition only 2 passphrases entered Matthew Crews <mailinglists@mattcrews.com> - 2018-08-02 03:10 +0200
    Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-02 09:20 +0200
    Re: luks, crypttab: why 3 partition only 2 passphrases entered Jonathan Dowland <jmtd@debian.org> - 2018-08-07 13:20 +0200
  Re: luks, crypttab: why 3 partition only 2 passphrases entered David Christensen <dpchrist@holgerdanske.com> - 2018-08-02 03:30 +0200
    Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-02 09:10 +0200
      Re: luks, crypttab: why 3 partition only 2 passphrases entered David Christensen <dpchrist@holgerdanske.com> - 2018-08-04 19:30 +0200
        Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-04 22:10 +0200
          Re: luks, crypttab: why 3 partition only 2 passphrases entered David Christensen <dpchrist@holgerdanske.com> - 2018-08-05 00:20 +0200
            Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-05 00:50 +0200
    Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-03 00:50 +0200
      Re: luks, crypttab: why 3 partition only 2 passphrases entered deloptes <deloptes@gmail.com> - 2018-08-03 10:10 +0200
      Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-05 00:00 +0200
        Re: luks, crypttab: why 3 partition only 2 passphrases entered Jonathan Dowland <jmtd@debian.org> - 2018-08-07 13:20 +0200
          Re: luks, crypttab: why 3 partition only 2 passphrases entered Carles Pina i Estany <carles@pina.cat> - 2018-08-08 00:20 +0200
            Re: luks, crypttab: why 3 partition only 2 passphrases entered Jonathan Dowland <jmtd@debian.org> - 2018-08-08 10:00 +0200
              Re: luks, crypttab: why 3 partition only 2 passphrases entered Celejar <celejar@gmail.com> - 2018-08-08 14:10 +0200

csiph-web