[systemd-devel] systemd prompts for luks key, but keyfile provided in crypttab
Alex
geosmin104 at gmail.com
Thu Jul 23 14:29:32 PDT 2015
I was advised on IRC to post this issue here after trying IRC, forums,
searches, man pages, wikis, etc.
During init, systemd asks for the passphrase of non-root LUKS drives when
they are added to crypttab even though a keyfile is specified. The keyfile
is the same one I'm using to open (old) truecrypt drives (also with
crypttab) - those open fine and don't ask for the passphrase.
/etc/crypttab looks like this:
tcrypt_drive1 /dev/sdXY /path/to/keyfile tcrypt
tcrypt_drive2 /dev/sdYX /path/to/keyfile tcrypt
luks_drive1 UUID=$UUID /path/to/keyfile
luks_drive2 UUID=$UUID /path/to/keyfile
What I've tried so far, in no particular order:
- Checking that crypttab's formatting is correct
- Checking that keyfile has proper permissions
- Adding and/or removing the 'luks' flag to the luks drives in crypttab
- Specifying an entry in /etc/fstab for where the luks drives should be
mounted
- Specifying an (identical) keyfile not being used by the tcrypt drives
- Removing the tcrypt drives from crypttab and leaving only the luks drives
- Using /dev/sdXY instead of UUID
- Reversing the order of the tcrypt and luks drives in crypttab
- Rebuilding initramfs
- Checking that crypttab was not present in initramfs
Note: LUKS drives open fine if passphrase is manually typed in when systemd
prompts for it, as well as post-init when using cryptsetup and specifying
the keyfile.
Input appreciated.
Thank you,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-devel/attachments/20150723/3906a6cf/attachment.html>
More information about the systemd-devel
mailing list