From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail01.freesources.org (mx01.freesources.org [80.237.252.132]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mail.server123.net (Postfix) with ESMTPS for ; Thu, 12 Jun 2014 14:39:51 +0200 (CEST) Received: from cb-hafen-75-61.rz.uni-frankfurt.de ([141.2.75.61]) by mail01.freesources.org with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1Wv3jP-0001Zy-Lu for dm-crypt@saout.de; Thu, 12 Jun 2014 12:03:50 +0000 Message-ID: <53999723.50006@freesources.org> Date: Thu, 12 Jun 2014 14:03:47 +0200 From: Jonas Meurer MIME-Version: 1.0 References: <5399922B.9030403@schmidt9.de> In-Reply-To: <5399922B.9030403@schmidt9.de> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: [dm-crypt] how to get a full disk encryption running on Linux Mint 17 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de Am 12.06.2014 13:42, schrieb Andreas:> hello, > > having used a Windows-based Truecrypt encryption with > pre-boot-authentication for some years, I want to do the corresponding > action under Linux. I am using Linux Mint 17 Cinnamon. The system has > one harddisk. Hello Andreas, first, welcome to the Linux world :) This list is mainly about dm-crypt kernel implementation, cryptsetup userspace tool and LUKS. Full disk encryption implementations by Linux distributions like in Debian, CentOS or Linux Mint are better discussed on the respective distribution-specific mailinglists or in suitable forums. I've no experiences with Linux Mint. But as it's a Ubuntu derivate which itself is a Debian derivate I guess that the disk encryption implementation is rather similar over there. At least Debian and Ubuntu Installers do support full disk encrpytion at installation time. So you don't have to setup it yourself. Nevertheless I'll give short comments below. > I got things working so far, using a VirtualBox machine, (so Mint 17 x32 > is used): > > - 200 MB primary partition ext3 on /dev/sda1 (unencrypted) as /boot > - 9,81 GB crypt-luks on /dev/sda2 (as seen from GParted) > > > This configuration boots up GRUB, Mint's green/white dots start flashing. > Then I think a timeout appears - message reads: > > "Gave up waiting for root device ... > ALERT /dev/mapper/ubuntu-root does not exist - dropping to a shell." Sounds like the disk (/dev/sda2) unlocking mechanism is missing from your boot process. Therefore LVM doesn't find the logical volumes, especially not the logical volume 'root' in volume group 'ubuntu'. Hence, the script that's responsible to mount your root filesystem fails with the error. > When I boot up from CD, start "Preferences - Disks" > [...] > So, the partions exist and can be unlocked. So at least the encryption works. My guess is that either the relevant line in /etc/crypttab is missing, or the cryptsetup binaries and scripts aren't included in the initramfs. I suggest you read /usr/share/doc/cryptsetup/README.Debian.gz and /usr/share/doc/cryptsetup/README.initramfs.gz. Kind regards, jonas