Groups > linux.debian.user > #219511

Re: Encrypted /boot password has to be entered twice

From	Guilhem Moulin <guilhem@debian.org>
Newsgroups	linux.debian.user
Subject	Re: Encrypted /boot password has to be entered twice
Date	2020-02-27 01:30 +0100
Message-ID	<zEfdT-5vn-1@gated-at.bofh.it> (permalink)
References	(1 earlier) <zDMlA-3ye-7@gated-at.bofh.it> <zDNB0-4eB-5@gated-at.bofh.it> <zDYwq-2Lx-1@gated-at.bofh.it> <zE6tX-9k-3@gated-at.bofh.it> <zEaee-2su-17@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Wed, 26 Feb 2020 at 19:59:33 +0100, john doe wrote:
> I don't understand why I get this error, the file is there

Did you triple-check that? :-)  `sudo cryptdisks_start sda1_crypt` will
do the checking logic for you, but you can also run the cryptsetup(8)
binary manually:

    $ sudo cryptsetup luksOpen --key-file /etc/keys/boot.key --key-slot 1 \
        --test-passphrase --verbose /dev/sda1 sda1_crypt

If it that doesn't work, then no wonder systemd-cryptsetup@sda1_crypt
fails :-)  Is the key file really used on key slot #1?  (If you're
unsure, just remove ‘--key-slot 1’ from the above command, it'll tell
you the index of the right keyslot, assuming it can open with that key
file.)

Otherwise, do you perhaps have /etc in a separate partition which is not
mounted yet by the time systems tries to unlock the device?  That said
systemd should be clever enough to setup the correct .mount dependencies
on that unit.

-- 
Guilhem.

PS. Not subscribed to debian-user

Thread

Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-25 11:40 +0100
  Re: Encrypted /boot password has to be entered twice Steve McIntyre <steve@einval.com> - 2020-02-25 18:40 +0100
    Re: Encrypted /boot password has to be entered twice Matthew Moore <a91738246@gmail.com> - 2020-02-25 20:00 +0100
      Re: Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-26 07:40 +0100
        Re: Encrypted /boot password has to be entered twice Guilhem Moulin <guilhem@debian.org> - 2020-02-26 16:10 +0100
          Re: Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-26 20:10 +0100
            Re: Encrypted /boot password has to be entered twice Guilhem Moulin <guilhem@debian.org> - 2020-02-27 01:30 +0100
              Re: Encrypted /boot password has to be entered twice john doe <johndoe65534@mail.com> - 2020-02-28 08:50 +0100

csiph-web