Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #209284

Re: Debian Stretch, no password prompt for luks-encrypted home partition during boot

From deloptes <deloptes@gmail.com>
Newsgroups linux.debian.user
Subject Re: Debian Stretch, no password prompt for luks-encrypted home partition during boot
Date 2019-05-28 08:40 +0200
Message-ID <y2DW9-7xW-7@gated-at.bofh.it> (permalink)
References (1 earlier) <y2okp-62G-5@gated-at.bofh.it> <y2AYh-5Gb-1@gated-at.bofh.it> <y2CQp-6Uv-7@gated-at.bofh.it> <y2Dt7-7no-1@gated-at.bofh.it> <y2DCN-7rd-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Sergey Belyashov wrote:

> Root partition is on mdraid but is not encrypted. Home is encrypted only.
> Modules are set to most already.
> 

I have this setup on my server, but I removed all crypted entries from fstab
because obviously I can not sit infront of the server to type the password
when booting. So I can not help in this case much. I put all of this in a
script that I execute after I ssh to the server.

On the clients I have root encrypted. I had issues in the beginning after
transfering the system from dbootstrap to the disk. In that case the UUIDs
were not correct. I always did set the init=/bin/sh on the command line in
grub to get the shell and debugged. Sometimes it is useful to add
a "rootdelay" to wait for the root device to get available, but in your
setup it looks like it is not exactly what you would need.

When the system boots it would read whatever you have in your initrd. It
would load the drivers and perform the boot process. Then it will pass
control to init and run the rest from the root system. IMO mounting home
comes in this second stage, but I am not 100% sure. What do you see when
you enable debug or verbose - what does it say when booting.

Also you have the fs type in fstab set to auto for your home - what happens
if you set the exact fs type like ext4 or xfs?

Do a change at a time and test after this.

regards

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Debian Stretch, no password prompt for luks-encrypted home partition  during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-27 12:30 +0200
  Fwd: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-27 16:00 +0200
    Re: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Ross Boylan <rossboylan@stanfordalumni.org> - 2019-05-28 05:30 +0200
      Re: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-28 07:30 +0200
        Re: Debian Stretch, no password prompt for luks-encrypted home partition during boot deloptes <deloptes@gmail.com> - 2019-05-28 08:10 +0200
          Re: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-28 08:20 +0200
            Re: Debian Stretch, no password prompt for luks-encrypted home partition during boot deloptes <deloptes@gmail.com> - 2019-05-28 08:40 +0200
              Re: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-28 10:00 +0200
              Fwd: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-28 13:20 +0200
                Re: Fwd: Debian Stretch, no password prompt for luks-encrypted home partition during boot deloptes <deloptes@gmail.com> - 2019-05-28 22:20 +0200
                Re: Fwd: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-29 14:00 +0200
      Re: Debian Stretch, no password prompt for luks-encrypted home partition during boot deloptes <deloptes@gmail.com> - 2019-05-28 08:20 +0200
  Re: Debian Stretch, no password prompt for luks-encrypted home  partition during boot Sergey Belyashov <sergey.belyashov@gmail.com> - 2019-05-30 11:00 +0200

csiph-web