Re: loop-aes encrypted root on Fedora 15 using systemd

[Jari Ruusu <jariruusu@users.sourceforge.net>]

Frederick Gazerblezeebe wrote:
> /dev/loop2: [0001]:5099 (/dev/sda2) encryption=AES128 multi-key-v3
> /dev/loop3: [0702]:2104244 (/dev/sda3) encryption=AES128 multi-key-v3
> 
> but systemd is unable to mount it to /home as defined in fstab,
> 
> /dev/loop3      /home      ext4    defaults        0 2    #/dev/sda3

Does it work if you remove #/dev/sda3 text at the end of the line? Strict
reading of fstab(5) man page says that lines that begin with # are comments.
Mount program fstab parser code seems to be happy with extra stuff at end of
line, but other fstab parser implementations are not necessarily ok with
that.

> One additional peculiarity is that although the swap is activated at
> boot time, it is not  encrypted until I remove/add it again.  The
> fstab entry is
> 
> /dev/sda5       swap       swap    sw,loop=/dev/loop5,encryption=AES128   0 0

That sounds like systemd is not using swapon program to enable swap. Does it
work if you set it up with non-changing encryption keys? As in,
build-initrd.sh sets it up, and /etc/fstab line is:

/dev/loop5  swap  swap  sw  0  0

-- 
Jari Ruusu  1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9  DB 1D EB E3 24 0E A9 DD