On Wed, 2010-03-31 at 02:37 +0000, TJ wrote:
> One thing I'll try is having the key-file on the root file-system just
> to see if that is the differentiator.
Confirming the easy bit: having the key-file in the encrypted root and
modifying /etc/crypttab allows an uninterrupted boot:
var /dev/mapper/Ubuntu-Lucid_var_encrypted /etc/keyfile luks
home /dev/mapper/Ubuntu-home /etc/keyfile luks
Thanks for that insight Steve - the new event-driven boot is certainly
throwing out some 'interesting' issues!
I'll follow through on the cryptsetup init jobs, especially -udev.
and the actual device-mapper names do not contain the "_unformatted"
suffix (which I have seen remain in /dev/mapper/ in the past):
$ ls -1 /dev/mapper
control
home
root
Ubuntu-all
Ubuntu-home
Ubuntu-Karmic
Ubuntu-Karmic_var
Ubuntu-Lucid_encrypted
Ubuntu-Lucid_var_encrypted
Ubuntu-Media
Ubuntu-SourceCode
Ubuntu-swap
Ubuntu-usr_local
Ubuntu-VideoCapture
Ubuntu-VirtualMachines
var
The udev log only shows the USB key, the sda3 /boot partition, the two
Windows installations (sda1, sda2) and the LVM PV (sda4) having an
ID_FS_USAGE key:
On Wed, 2010-03-31 at 02:37 +0000, TJ wrote:
> One thing I'll try is having the key-file on the root file-system just
> to see if that is the differentiator.
Confirming the easy bit: having the key-file in the encrypted root and
modifying /etc/crypttab allows an uninterrupted boot:
var /dev/mapper/ Ubuntu- Lucid_var_ encrypted /etc/keyfile luks Ubuntu- home /etc/keyfile luks
home /dev/mapper/
Thanks for that insight Steve - the new event-driven boot is certainly
throwing out some 'interesting' issues!
I'll follow through on the cryptsetup init jobs, especially -udev.
A quick test using:
$ sudo udevadm monitor --property > udevadm- monitor- -property. log &
$ sudo udevadm trigger
$ fg
^C
and comparison to /etc/init/ cryptdisks- udev.conf reveals that *none* of
the LUKS LVMs has the property ID_FS_USAGE=crypto:
$ grep -i crypt udevadm- monitor- -property. log 1270004082. 078366] add /devices/ virtual/ misc/ecryptfs (misc) /devices/ virtual/ misc/ecryptfs virtual/ misc/ecryptfs (misc) /devices/ virtual/ misc/ecryptfs /dev/ecryptfs CRYPT-LUKS1- 5a1b276fe73543f f8d09d2c96f4bee 42-var_ unformatted Ubuntu- Lucid_encrypted CRYPT-LUKS1- 702270f27c3948f b83020b119e29cb 24-root Ubuntu- Lucid_var_ encrypted CRYPT-LUKS1- 16cb06fad6aa419 cadeaac9e1c348f ce-home_ unformatted
KERNEL[
DEVPATH=
DEVNAME=ecryptfs
UDEV [1270004082.368070] add /devices/
DEVPATH=
DEVNAME=
DM_UUID=
DM_NAME=
DM_UUID=
DM_NAME=
DM_UUID=
and the actual device-mapper names do not contain the "_unformatted"
suffix (which I have seen remain in /dev/mapper/ in the past):
$ ls -1 /dev/mapper Lucid_encrypted Lucid_var_ encrypted VirtualMachines
control
home
root
Ubuntu-all
Ubuntu-home
Ubuntu-Karmic
Ubuntu-Karmic_var
Ubuntu-
Ubuntu-
Ubuntu-Media
Ubuntu-SourceCode
Ubuntu-swap
Ubuntu-usr_local
Ubuntu-VideoCapture
Ubuntu-
var
The DM_UUID= properties match:
$ ls -l /dev/disk/by-uuid/ | egrep 'Ubuntu- .*(encrypted| home)' d6aa-419c- adea-ac9e1c348f ce -> ../../mapper/ Ubuntu- home e735-43ff- 8d09-d2c96f4bee 42 -> ../../mapper/ Ubuntu- Lucid_var_ encrypted 7c39-48fb- 8302-0b119e29cb 24 -> ../../mapper/ Ubuntu- Lucid_encrypted
16cb06fa-
5a1b276f-
702270f2-
The udev log only shows the USB key, the sda3 /boot partition, the two
Windows installations (sda1, sda2) and the LVM PV (sda4) having an
ID_FS_USAGE key:
$ grep -i -B 4 ID_FS_USAGE udevadm- monitor- -property. log D313-1D74 ENC=D313- 1D74 filesystem af296c2f- a6f5-4cdb- b74c-66310f1696 77 ENC=af296c2f- a6f5-4cdb- b74c-66310f1696 77 filesystem ENC=Recovery CCE61747E61730E 6 ENC=CCE61747E61 730E6 filesystem ENC=Vista E6E08581E085592 7 ENC=E6E08581E08 55927 filesystem ciBh6h- 0yEr-7c3u- y3el-QUAc- i7tj-YyHD46 ENC=ciBh6h- 0yEr-7c3u- y3el-QUAc- i7tj-YyHD46 LVM2\x20001 LVM2_member
ID_FS_UUID=
ID_FS_UUID_
ID_FS_VERSION=FAT32
ID_FS_TYPE=vfat
ID_FS_USAGE=
--
ID_FS_UUID=
ID_FS_UUID_
ID_FS_VERSION=1.0
ID_FS_TYPE=ext3
ID_FS_USAGE=
--
ID_FS_LABEL_
ID_FS_UUID=
ID_FS_UUID_
ID_FS_TYPE=ntfs
ID_FS_USAGE=
--
ID_FS_LABEL_
ID_FS_UUID=
ID_FS_UUID_
ID_FS_TYPE=ntfs
ID_FS_USAGE=
--
ID_FS_UUID=
ID_FS_UUID_
ID_FS_VERSION=
ID_FS_TYPE=
ID_FS_USAGE=raid
Steve, do you know under what circumstances "ID_FS_ USAGE=crypto" should
exist? Maybe it is only in raw disk partitions, not LVM volumes?