robot682
-
Posts
4 -
Joined
-
Last visited
Content Type
Profiles
Forums
Blogs
Posts posted by robot682
-
-
Hi,
I'm trying to boot an encrypted root filesystem off of a LUKS encrypted LVM table. The LUKS key is protected by a GPG key. I built an initramfs with dracut using both the crypt and crypt-gpg modules. The boot partition and key file are on a USB drive.
When I boot, there is a kernel panic. I've tried adding the serial and console options to grub.cfg as well as the rd.shell option, but I can't seem to get Dracut to drop to a shell so I can troubleshoot the issue. Any help would be appreciated.
Here is my grub.cfg
set timeout=3 serial --unit=0 --speed=9600 terminal --timeout=5 serial console insmod part_gpt insmod ext2 set root=(hostdisk//dev/sdb,gpt1) search --no-floppy --fs-uuid --set 79d306ed-2578-4ac9-a199-6f61a6a7e64c if loadfont /grub/unifont.pf2; then set gfxmode=text insmod gfxterm insmod vbe terminal_output gfxterm fi set menu_color_normal=cyan/blue set menu_color_highlight=blue/cyan menuentry "Funtoo Linux Dracut - vmlinuz-3.16.2-hardened-r2" { insmod part_gpt insmod ext2 set root=(hostdisk//dev/sdb,gpt1) search --no-floppy --fs-uuid --set 79d306ed-2578-4ac9-a199-6f61a6a7e64c linux /vmlinuz-3.16.2-hardened-r2 rootfstype=ext4 luks enc_root=UUID=77f735b0-3d46-4fd7-9751-34df92d460d5 lvm rd.luks.key=/boot/luks-key.gpg root=/dev/mapper/vg1-root console=tty0 console=ttyS0,9600 rd.shell set gfxpayload=text } set default=0My fstab looks like this:
# <fs> <mountpoint> <type> <opts> <dump/pass> /dev/sdb1 /boot ext2 noauto,noatime 1 2 UUID=7e35db9b-f5f7-4bb3-98e1-1466f56ed9b1 none swap sw 0 0 UUID=625a0681-e435-429f-976e-e3bb4830ad17 / ext4 noatime 0 1 UUID=3e09d6e9-2f69-43fd-b718-4d5dbd319e82 /tmp ext4 noatime 0 2 UUID=25be8c28-fff2-4b37-bf23-c9bad9153036 /var ext4 noatime 0 2 UUID=9b77ff9d-fa7e-4a30-8995-dbefe0669839 /home ext4 noatime 0 2 /dev/cdrom /mnt/sr0 auto noauto,ro 0 2
Here is the output of blkid
/dev/loop0: TYPE="squashfs" /dev/sda1: UUID="77f735b0-3d46-4fd7-9751-34df92d460d5" TYPE="crypto_LUKS" /dev/sr0: LABEL="Ubuntu 14.04.1 LTS amd64" TYPE="iso9660" /dev/sdb1: UUID="79d306ed-2578-4ac9-a199-6f61a6a7e64c" TYPE="ext2" /dev/mapper/funtoo: UUID="TTLf8a-U1Vg-r8FZ-L0cl-2KWm-bR3p-u7tSDA" TYPE="LVM2_member" /dev/mapper/vg1-swap: LABEL="swap" UUID="7e35db9b-f5f7-4bb3-98e1-1466f56ed9b1" TYPE="swap" /dev/mapper/vg1-root: LABEL="root" UUID="625a0681-e435-429f-976e-e3bb4830ad17" TYPE="ext4" /dev/mapper/vg1-tmp: LABEL="tmp" UUID="3e09d6e9-2f69-43fd-b718-4d5dbd319e82" TYPE="ext4" /dev/mapper/vg1-var: LABEL="var" UUID="25be8c28-fff2-4b37-bf23-c9bad9153036" TYPE="ext4" /dev/mapper/vg1-home: LABEL="home" UUID="9b77ff9d-fa7e-4a30-8995-dbefe0669839" TYPE="ext4"
-
Thank you sputnik. Switching /etc/fstab to use UUIDs caused boot-update to succeed.
-
Hi,
I'm trying to follow the guide to install the root filesystem over encrypted LVM, which can be found here: http://www.funtoo.org/Rootfs_over_encrypted_lvm and have run into a bit of a hiccup with boot-update. I'm hoping someone can help me.
I should state that I'm trying to boot the kernel off of a USB drive, which on my setup is /dev/sdb1.
/dev/sda1 contiains the logical volumes including the rest of the OS and other mount points.
When I run boot-update, I get the following errors.
boot-update 1.6.11 / Copyright 2009-2012 Funtoo Technologies [use option "-l" for license info, "-h" for help] * Generating config for grub... * ERROR : (rootfstype=auto) - cannot find a valid / entry in /etc/fstab. * ERROR : No matching kernels or boot entries found in /etc/boot.conf. * Did not complete successfully.
My /etc/boot.conf file looks like this:
boot { generate grub default "Funtoo Linux Dracut" timeout 3 } "Funtoo Linux Dracut" { kernel vmlinuz[-v] initrd initramfs[-v] params += rootfstype=ext4 params += luks enc_root=77f735b0-3d46-4fd7-9751-34df92d460d5 params += lvm root=UUID=625a0681-e435-429f-976e-e3bb4830ad17 params += rd.luks.key=/boot/luks-key.gpg }My /etc/fstab file is as follows:
# <fs> <mountpoint> <type> <opts> <dump/pass> /dev/sdb1 /boot ext2 noauto,noatime 1 2 /dev/mapper/vg1-swap none swap sw 0 0 /dev/mapper/vg1-root / ext4 noatime 0 1 /dev/mapper/vg1-tmp /tmp ext4 noatime 0 2 /dev/mapper/vg1-var /var ext4 noatime 0 2 /dev/mapper/vg1-home /home ext4 noatime 0 2 /dev/cdrom /mnt/sr0 auto noauto,ro 0 2
Finally, my /boot partition contains the following files, which include the kernel and the initramfs files.
-rw-r--r-- 1 root root 3835913 Sep 14 01:08 System.map-3.16.2-hardened -rw-r--r-- 1 root root 98826 Sep 14 01:08 config-3.16.2-hardened drwxr-xr-x 4 root root 4096 Sep 14 01:11 grub -rw------- 1 root root 6974532 Sep 14 11:51 initramfs-vlinuz-3.16.2-hardened.img drwx------ 2 root root 16384 Sep 14 01:07 lost+found -rwxr-xr-x 1 root root 8409125 Sep 14 01:09 luks-key.gpg -rw-r--r-- 1 root root 6979552 Sep 14 01:09 vmlinuz-3.16.2-hardened
I have also tried copying and pasting the file names directly into /etc/boot.conf as a means of troubleshooting, but that didn't work. The initramfs was built using dracut, if that matters.
Any help would be appreciated.
LVM Partitions Not Mounted
in Installation Help
Posted
Hello,
I've been having a bit of a time with this install. I have the whole root filesystem on an encrypted LVM group. When I boot, I'm prompted for the password and the luks container is decrypted, but only root an swap are mounted. I get errors about the other partitions, which cause the system to break, including portage.
My fstab is as follows:
When I boot, I get the following errors
lvdisplay shows all of the logical volumes, but the UUIDs are different
lvscan shows that they are all active
blkid only shows root and swap.
ls /dev/vg1/ just shows root and swap
It's worth mentioning that I am booting with dracut and using it to decrypt the luks container, so dracut has the enc_root and real_root set to the UUIDs of root and the luks container.
If I reboot the system and decrypt the luks container, blk looks like this:
Any help would be appreciated.