From: Robert Nichols <rnicholsNOSPAM@comcast.net>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] LVM on LUKS: volumes missing
Date: Fri, 3 Jun 2016 17:46:53 -0500 [thread overview]
Message-ID: <nit1ct$vgf$1@ger.gmane.org> (raw)
In-Reply-To: <20160603214220.GC6423@tansi.org>
On 06/03/2016 04:42 PM, Arno Wagner wrote:
> One thing is that these problems are pretty hard to debug.
> Another is that LVM massively complicates things.
>
> Now, if the LUKS container opens cleanly, anything
> in it should be decrypted correctly (if it is LVM
> atop of LUKS) and decryption with the wrong key is
> not actually a possibility.
>
> That also means you should be able to use LVM
> recovery techniques (I assume they exist) on this.
>
> Unfortunately, I cannot help you with LVM as I do not use
> it. I consider it a badly engineered, overly complicated
> thing that decreases reliablity and makes problem
> diagnostics very hard.
If the ASCII strings "LABELONE" and "LVM2" cannot be seen in the first
few sectors of the volume, then that volume is either overwritten or not
being decrypted correctly. LVM keeps quite a bit of easily recognized
ASCII data in the volume header.
In this case the fragile link seems to be the LUKS detached header, as I
believe there is nothing to associate that header with a device and
precise starting point for the payload. Yes, there is a check that the
master key was reconstructed correctly. Now the question is what, if
anything, does this key decrypt.
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.
next prev parent reply other threads:[~2016-06-03 22:47 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-05-30 21:54 [dm-crypt] LVM on LUKS: volumes missing fauno
2016-05-31 7:53 ` Ondrej Kozina
2016-05-31 7:53 ` [linux-lvm] " Ondrej Kozina
2016-05-31 13:17 ` fauno
2016-06-02 13:22 ` Ondrej Kozina
2016-06-02 13:39 ` fauno
2016-06-02 13:52 ` fauno
2016-06-02 14:50 ` Zdenek Kabelac
2016-06-02 15:09 ` fauno
2016-06-02 15:20 ` Zdenek Kabelac
2016-05-31 12:52 ` Robert Nichols
2016-05-31 14:54 ` fauno
2016-06-02 12:57 ` fauno
2016-06-02 18:31 ` Robert Nichols
2016-06-03 21:42 ` Arno Wagner
2016-06-03 22:46 ` Robert Nichols [this message]
2016-06-04 8:06 ` Arno Wagner
2016-06-07 14:24 ` fauno
-- strict thread matches above, loose matches on Subject: below --
2016-05-30 21:26 fauno
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='nit1ct$vgf$1@ger.gmane.org' \
--to=rnicholsnospam@comcast.net \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.