Groups > linux.debian.user > #219418

Encrypted /boot password has to be entered twice

From	john doe <johndoe65534@mail.com>
Newsgroups	linux.debian.user
Subject	Encrypted /boot password has to be entered twice
Date	2020-02-25 11:40 +0100
Message-ID	<zDFN7-7Z0-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi all, when encrypting /boot on Buster after a fresh install of Debian
with encrypted lvm, I need to enter three times a passthrase (two times
foor /boot, one time foor /root)

"...

GRUB loading..
Welcome to GRUB!

Attempting to decrypt master key...
Enter passphrase for hd0,msdos1 (...):
Slot 0 opened

..

                            GNU GRUB  version 2.04-5

   The highlighted entry will be executed automatically in 0s.

...

  Booting `Debian GNU/Linux'

  Volume group "debian-bustervm-vg" not found
  Cannot process volume group debian-bustervm-vg
  Volume group "debian-bustervm-vg" not found
  Cannot process volume group debian-bustervm-vg
Please unlock disk sda5_crypt:
cryptsetup: sda5_crypt: set up successfully
/dev/mapper/debian--buster--try02vm--vg-root: clean, 38666/507904 files,
434177s
Please enter passphrase for disk QEMU_HARDDISK (boot_crypt): ***"

I don't understand why after boot is encrypted the above passthrase
prompt ask me to enter this passthrase for the second time for the boot
partition.
Why is that so and how can I avoid this extra step?

I'm testing here in a qemu VM.

I use (1) to encrypt  the boot partition.

1)  https://cryptsetup-team.pages.debian.net/cryptsetup/encrypted-boot.html

--
John Doe

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-25 11:40 +0100
  Re: Encrypted /boot password has to be entered twice Steve McIntyre <steve@einval.com> - 2020-02-25 18:40 +0100
    Re: Encrypted /boot password has to be entered twice Matthew Moore <a91738246@gmail.com> - 2020-02-25 20:00 +0100
      Re: Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-26 07:40 +0100
        Re: Encrypted /boot password has to be entered twice Guilhem Moulin <guilhem@debian.org> - 2020-02-26 16:10 +0100
          Re: Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-26 20:10 +0100
            Re: Encrypted /boot password has to be entered twice Guilhem Moulin <guilhem@debian.org> - 2020-02-27 01:30 +0100
              Re: Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-28 08:50 +0100

csiph-web