help-grub
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

luks + lvm full disk encrytion


From: Robert Necela
Subject: luks + lvm full disk encrytion
Date: Fri, 22 Mar 2013 14:47:52 +0100


Hello,

i try to do full encyption of disk with grub2 but after start they ask me for password and looks like my password is wrong:
Code:

Attemting to decrypt master key...
Enter passphrase for hd0,msdos3 (...my_uuid...):
error: access denied.


But my password is correct. Whole partition sda3 was encrypted with cryptsetup and luks. And after that i create lvm volume group with logical volumes.


Code:
cryptsetup status root
/dev/mapper/root is active and is in use.
  type:    LUKS1
  cipher:  serpent-cbc-essiv:sha256
  keysize: 256 bits
  device:  /dev/sda3
  offset:  4096 sectors
  size:    519024640 sectors
  mode:    read/write


I install grub2 with device-mapper flag and GRUB_PLATFORMS="emu pc"

i use this command to install grub
Code:

GRUB_CRYPTODISK_ENABLE=y grub2-install --modules="configfile linux crypto search_fs_uuid" /dev/sda
Installation finished. No error reported.


and grub-install will create image with these options:

Code:
/usr/bin/grub2-mkimage -c /boot/grub2/i386-pc/load.cfg -d /usr/lib/grub/i386-pc -O i386-pc --output=/boot/grub2/i386-pc/core.img '--prefix=(lvm/vg-boot)/grub2' configfile linux crypto search_fs_uuid biosdisk ext2 part_msdos cryptodisk luks gcry_serpent gcry_serpent gcry_sha1 gcry_sha256 lvm


output from grub-install --debug is here http://pastebin.com/AnLAs2U4

Thanks

reply via email to

[Prev in Thread] Current Thread [Next in Thread]