From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1RLfJ0-0007P1-13 for mharc-grub-devel@gnu.org; Wed, 02 Nov 2011 14:12:54 -0400 Received: from eggs.gnu.org ([140.186.70.92]:49751) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RLfIw-0007Oq-Lp for grub-devel@gnu.org; Wed, 02 Nov 2011 14:12:52 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RLfIv-0007JD-5a for grub-devel@gnu.org; Wed, 02 Nov 2011 14:12:50 -0400 Received: from mail-ww0-f41.google.com ([74.125.82.41]:55777) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RLfIu-0007J9-To for grub-devel@gnu.org; Wed, 02 Nov 2011 14:12:49 -0400 Received: by wwf27 with SMTP id 27so4268111wwf.0 for ; Wed, 02 Nov 2011 11:12:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:x-enigmail-version:content-type; bh=EA3dv2+xcj9lqXkbF3Vp4z/urNd4IkS33yNqC43rnm4=; b=kGg93Vj2CcRA/sS9sgP8dsJ4tRUtFC8aE4ZLyJpmG0+Gp4uXdPzEuCAHpr2H46vcAV wLIvGLx7veQjrIGqkRDJnbJ9TQ86eVXENhmo0z8Wx7jdKjuMIIO8DFpSQMcGsdL7AK3z ZHlL3qobeNFuxz/ey0pKXBndrhJjj6/ZVa/0U= Received: by 10.227.202.70 with SMTP id fd6mr6990901wbb.27.1320257568127; Wed, 02 Nov 2011 11:12:48 -0700 (PDT) Received: from debian.x201.phnet (222-80.203-62.cust.bluewin.ch. [62.203.80.222]) by mx.google.com with ESMTPS id e7sm5546327wbh.12.2011.11.02.11.12.45 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 02 Nov 2011 11:12:46 -0700 (PDT) Message-ID: <4EB1880A.1020509@gmail.com> Date: Wed, 02 Nov 2011 19:12:26 +0100 From: =?UTF-8?B?VmxhZGltaXIgJ8+GLWNvZGVyL3BoY29kZXInIFNlcmJpbmVua28=?= User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20111010 Iceowl/1.0b2 Icedove/3.1.15 MIME-Version: 1.0 To: grub-devel@gnu.org Subject: Re: luks testing and source deb pkg References: <4EB0792D.6060701@canonical.com> In-Reply-To: X-Enigmail-Version: 1.1.2 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="------------enig522F44B49C9A5944A040DE50" X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 74.125.82.41 X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Nov 2011 18:12:52 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig522F44B49C9A5944A040DE50 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 02.11.2011 18:59, Lukas Anzinger wrote: > Hi, > > I'm currently also trying to use to the luks code from trunk by using > a modified Debian package and the latest source from the Bazaar > repository. > > However after entering the password, the grub menu doesn't show up and > it states that the password is incorrect. I used 12345 which is > obviously very hard to misspell repeatedly. I then tried to insert the > master password from the LUKS partition directly into the source code > and luckily succeeded with that! I'll post the snippet and my > modifications to the package tomorrow if someone is interested. Since > there is practically no information about this in the internet, I'll > probably write a tutorial on how to do a full system encryption > "TrueCrypt style" (i.e. with an encrypted /boot partition). > Could you make a small 1MiB example image, compress and send it to me? > So my question is, James, how did you create your encrypted partition > and what file system did you use? > > I always use "cryptsetup luksFormat /dev/sda1" (on Debian Sid) which > uses aes-cbc-essiv as a default value AFAIK and ext3. > > Could you also append your tared "debian" folder which generates the > grub package(s)? > > Regards, > > Lukas > > On Tue, Nov 1, 2011 at 23:56, James M. Leddy wrote: >> Hi, >> >> I've successfully tested the luks code in ubuntu using a modified grub= 2 >> package. You can test yourself if you're already using crypted root an= d >> separate /boot by rsying the /boot dev to the root filesyste, removing= the >> /etc/fstab entry, and running: >> >> # GRUB_CRYPTODISK_ENABLE=3Dy grub-install --debug --modules=3Dconfigfi= le >> --modules=3Dgcry_sha1 --modules=3Dgcry_sha256 --modules=3Dfshelp >> --modules=3Dbiosdisk --modules=3Dpart_msdos --modules=3Dlinux --module= s=3Dext2 >> --modules=3Dhelp --modules=3Dminicmd --modules=3Dcrypto --modules=3Dcr= yptodisk >> --modules=3Dgcry_rijndael --modules=3Dluks /dev/sda >> # GRUB_CRYPTODISK_ENABLE=3Dy update-grub >> >> >> The merged source is available here: >> >> https://code.launchpad.net/~jm-leddy/+junk/grub-luks >> >> just do a : >> >> $ bzr branch lp:~jm-leddy/+junk/grub-luks >> $ cd grub-luks >> $ bzr builddeb >> >> _______________________________________________ >> Grub-devel mailing list >> Grub-devel@gnu.org >> https://lists.gnu.org/mailman/listinfo/grub-devel >> > _______________________________________________ > Grub-devel mailing list > Grub-devel@gnu.org > https://lists.gnu.org/mailman/listinfo/grub-devel --=20 Regards Vladimir '=CF=86-coder/phcoder' Serbinenko --------------enig522F44B49C9A5944A040DE50 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iF4EAREKAAYFAk6xiBwACgkQNak7dOguQgmaQgEAmEjBEBxxMOg6BalQt1CUO/B7 zr7P0Yufp0fI9kb7V2UA/A2Pl3N2rVLZzKyFlgwXeuRxkdb5IdaDpVhKUmPsbUwl =r2t+ -----END PGP SIGNATURE----- --------------enig522F44B49C9A5944A040DE50--