[dm-crypt] cryptsetup, tcrypt-system and multiple partitions

[dm-crypt] cryptsetup, tcrypt-system and multiple partitions

[na]

[-- Attachment #1: Type: text/plain, Size: 896 bytes --]

Hello,

thanks for the great work on tcrypt support in cryptsetup!

I do have one issue tho and I hope I'm doing something wrong.

Here's my setup. I've got one drive , sda, with usual LUKS setup
and another drive , sdb, which is truecrypt encrypted (windows
installation).
The second drive has three partitions , sdb1,sdb2 and sdb3.

Now, I wanted to use cryptsetup via systemd to automagically mount the
second drive partitions.
But, manpages and the code suggest that if a partition is system-encrypted
with truecrypt, one should use the whole device in crypttab and not the
partition (so /dev/sdb and not /dev/sdb1 for example).

If set that way , and the mapped device is listed in fstab accordingly, it
works fine, but only for the first partition, /dev/sdb1 that is. How am I
supposed to mount the other three partitions ?
How would I specify it in crypttab and fstab?

Thanks in advance!

[-- Attachment #2: Type: text/html, Size: 1104 bytes --]

Re: [dm-crypt] cryptsetup, tcrypt-system and multiple partitions

[.. ink ..]

[-- Attachment #1: Type: text/plain, Size: 1410 bytes --]

On Sat, Nov 23, 2013 at 6:32 PM, na <fulldisea@gmail.com> wrote:

> Hello,
>
> thanks for the great work on tcrypt support in cryptsetup!
>
> I do have one issue tho and I hope I'm doing something wrong.
>
> Here's my setup. I've got one drive , sda, with usual LUKS setup
> and another drive , sdb, which is truecrypt encrypted (windows
> installation).
> The second drive has three partitions , sdb1,sdb2 and sdb3.
>
> Now, I wanted to use cryptsetup via systemd to automagically mount the
> second drive partitions.
> But, manpages and the code suggest that if a partition is system-encrypted
> with truecrypt, one should use the whole device in crypttab and not the
> partition (so /dev/sdb and not /dev/sdb1 for example).
>
> If set that way , and the mapped device is listed in fstab accordingly, it
> works fine, but only for the first partition, /dev/sdb1 that is. How am I
> supposed to mount the other three partitions ?
> How would I specify it in crypttab and fstab?
>
> Thanks in advance!
>
>

I think you can use partitions on truecrypt-system with cryptsetup 1.6.2
going up.
If you are trying to use cryptsetup through systemd,then the best place to
ask your question will be with systemd people.
Try to use cryptsetup directly to have an idea of how it works first before
trying to use it through systemd.

You will have a better chance of getting support if you are using
cryptsetup directly.

[-- Attachment #2: Type: text/html, Size: 2056 bytes --]

Re: [dm-crypt] cryptsetup, tcrypt-system and multiple partitions

[na]

[-- Attachment #1: Type: text/plain, Size: 2633 bytes --]

I don't think this has anything to do with systemd.
The problem is that when the decrypted drive gets mapped, I can mount only
one partition.
Regardless if I do it from crypttab or manualy.

Here:
I can map the device
[root@localhost mnt]# cryptsetup --tcrypt-system --type tcrypt open
/dev/sdb tcrypt-volume

[root@localhost mnt]# ls -l /dev/mapper/tcrypt-volume
lrwxrwxrwx 1 root root 7 Nov 26 13:12 /dev/mapper/tcrypt-volume -> ../dm-7
[root@localhost mnt]#

/dev/sdb has 3 partitions, all of which are tcrpyt encrypted (system
encryption)

sdb                                                 8:16   0 465.8G  0
disk
├─sdb1                                              8:17   0   150G  0
part
├─sdb2                                              8:18   0   200G  0
part
└─sdb3                                              8:19   0 115.8G  0 part

If I now do mount /dev/mapper/tcrypt-volume /some/mountpoint , only
decrypted /dev/sdb1 gets mounted (obviously).
How do I them mount the other two ?

Thanks!



On Mon, Nov 25, 2013 at 5:12 AM, .. ink .. <mhogomchungu@gmail.com> wrote:

>
> On Sat, Nov 23, 2013 at 6:32 PM, na <fulldisea@gmail.com> wrote:
>
>> Hello,
>>
>> thanks for the great work on tcrypt support in cryptsetup!
>>
>> I do have one issue tho and I hope I'm doing something wrong.
>>
>> Here's my setup. I've got one drive , sda, with usual LUKS setup
>> and another drive , sdb, which is truecrypt encrypted (windows
>> installation).
>> The second drive has three partitions , sdb1,sdb2 and sdb3.
>>
>> Now, I wanted to use cryptsetup via systemd to automagically mount the
>> second drive partitions.
>> But, manpages and the code suggest that if a partition is
>> system-encrypted with truecrypt, one should use the whole device in
>> crypttab and not the partition (so /dev/sdb and not /dev/sdb1 for example).
>>
>> If set that way , and the mapped device is listed in fstab accordingly,
>> it works fine, but only for the first partition, /dev/sdb1 that is. How am
>> I supposed to mount the other three partitions ?
>> How would I specify it in crypttab and fstab?
>>
>> Thanks in advance!
>>
>>
>
> I think you can use partitions on truecrypt-system with cryptsetup 1.6.2
> going up.
> If you are trying to use cryptsetup through systemd,then the best place to
> ask your question will be with systemd people.
> Try to use cryptsetup directly to have an idea of how it works first
> before trying to use it through systemd.
>
> You will have a better chance of getting support if you are using
> cryptsetup directly.
>

[-- Attachment #2: Type: text/html, Size: 3900 bytes --]

Re: [dm-crypt] cryptsetup, tcrypt-system and multiple partitions

[Milan Broz]

On 11/26/2013 01:24 PM, na wrote:
> I don't think this has anything to do with systemd.
> The problem is that when the decrypted drive gets mapped, I can mount only one partition.
> Regardless if I do it from crypttab or manualy.

Processing of crypttab is purely systemd area but if it doesn't work even from
commandline, you are on the correct list :)

What version of cryptsetup are you using (if not, please try with 1.6.2)?

Can you paste log (add --debug) for the second (failing) mapping and sent
it to me or list (or create new issue and paste it there
http://code.google.com/p/cryptsetup/issues/entry )

Thanks,
Milan

Re: [dm-crypt] cryptsetup, tcrypt-system and multiple partitions

[na]

[-- Attachment #1: Type: text/plain, Size: 1017 bytes --]

Thanks again for the help.

I'm using cryptsetup 1.6.2 (the one that comes with fedora 20).

I've opened the issue here
http://code.google.com/p/cryptsetup/issues/detail?id=183&thanks=183&ts=1385544074

Hope it's clear, if you need anything more, I'll be more than happy to
help.


On Tue, Nov 26, 2013 at 2:11 PM, Milan Broz <gmazyland@gmail.com> wrote:

> On 11/26/2013 01:24 PM, na wrote:
> > I don't think this has anything to do with systemd.
> > The problem is that when the decrypted drive gets mapped, I can mount
> only one partition.
> > Regardless if I do it from crypttab or manualy.
>
> Processing of crypttab is purely systemd area but if it doesn't work even
> from
> commandline, you are on the correct list :)
>
> What version of cryptsetup are you using (if not, please try with 1.6.2)?
>
> Can you paste log (add --debug) for the second (failing) mapping and sent
> it to me or list (or create new issue and paste it there
> http://code.google.com/p/cryptsetup/issues/entry )
>
> Thanks,
> Milan
>

[-- Attachment #2: Type: text/html, Size: 1677 bytes --]