BTS

Issue1292

Title live-boot: encrypted persistency fails
Priority bug Status resolved
Superseder Nosy List evgeni, jimmy, mika
Assigned To evgeni Topics

Created on 2014-02-10.11:12:03 by mika, last changed 2014-03-17.08:25:01 by mika.

Files
File name Uploaded Type Edit Remove
grml64-custom_mounts_fail.png mika, 2014-02-10.11:12:02 image/png
Messages
msg4732 (view) Author: mika Date: 2014-03-17.08:25:00
Good to see that latest live-boot fixes this issue, thanks everyone. :)
msg4729 (view) Author: evgeni Date: 2014-03-15.08:55:16
Patch for the messages upstream: https://lists.debian.org/debian-
live/2014/03/msg00020.html

They appear only in some corner cases, just do not care too much :)
msg4728 (view) Author: jimmy Date: 2014-03-15.02:15:19
Did everything again from scratch and this time there was no error message 
regarding /tmp/custom_mounts.list. I removed the disk that I used for persistency 
and recreated it. This time with persistence.conf. So it looks like that the 
error message does not always appear.
msg4727 (view) Author: jimmy Date: 2014-03-15.01:58:18
Works for me, too, with daily build. Tested with virtualbox and a similar setup 
like evgeni. Did not use a label either. Although it would be cool to activate 
encryption support by just providing a label instead of a bootoption, IMO.
I had to boot a couple of times because I copied persistence.conf to the wrong 
place outside of the image ;) But that's why I realized that the error message 
appears only on the first boot! I have not found out yet why this is happening.
msg4726 (view) Author: evgeni Date: 2014-03-14.16:29:32
The error message is correct, though. Let's see if that's patchable upstream.
msg4725 (view) Author: evgeni Date: 2014-03-14.16:29:11
Works for me:

qemu-img create -f raw persist-crypt.img 512M
sudo losetup -f persist-crypt.img
sudo cfdisk /dev/loop1 (create one big partition)
sudo cryptsetup luksFormat /dev/loop1p1
sudo cryptsetup luksOpen /dev/loop1p1 cryptloop
sudo mkfs.ext4 -Lpersistence /dev/mapper/cryptloop
sudo mount /dev/mapper/cryptloop /mnt 
sudo vim /mnt/persistence.conf
sudo umount /mnt 
sudo cryptsetup luksClose cryptloop 
sudo losetup -d /dev/loop1

kvm -m 1024 -hda persist-crypt.img -cdrom /home/evgeni/Downloads/grml64-
small_sid_latest.iso -boot d

I put "/ union" in the conf -- sure you typed "union /"? :)
I booted with "persistence persistence-encryption=luks", but passing a label did 
work too, even though not needed in my setup.
msg4720 (view) Author: mika Date: 2014-02-10.11:56:16
The luks-enabled persistency doesn't seem to work (or its usage is unclear :)).

Also it emmits strange error message during bootup because it tries to access
/tmp/custom_mounts.list before making sure file exists (also see attached
screenshot).

How to reproduce (rewriting from memory):

* cryptsetup luksFormat /dev/sdX2
* cryptsetup luksOpen /dev/sdX2 crypto
* mkfs.ext4 -L persluks /dev/mapper/crypto
* mount /dev/mapper/crypto /media/test
* echo "union /" > /media/test/persistence.conf
* umount /media/test
* cryptsetup luksClose /dev/mapper/crypto
* reboot with boot options "persistence persistence-encryption=luks
persistence-label=persluks"
msg4717 (view) Author: mika Date: 2014-02-10.11:12:02
Boot options in usage:

 persistence persistence-encryption=(luks,none) persistence-label=persluks
History
Date User Action Args
2014-03-17 08:25:01mikasetstatus: chatting -> resolved
nosy: mika, jimmy, evgeni
messages: + msg4732
2014-03-15 08:55:16evgenisetnosy: mika, jimmy, evgeni
messages: + msg4729
2014-03-15 02:15:19jimmysetnosy: mika, jimmy, evgeni
messages: + msg4728
2014-03-15 01:58:18jimmysetnosy: + jimmy
messages: + msg4727
2014-03-14 16:29:32evgenisetnosy: mika, evgeni
messages: + msg4726
2014-03-14 16:29:11evgenisetassignedto: evgeni
messages: + msg4725
nosy: + evgeni
2014-02-10 11:56:28mikasettitle: live-boot: -> live-boot: encrypted persistency fails
2014-02-10 11:56:16mikasetstatus: unread -> chatting
messages: + msg4720
title: live-boot: access to /tmp/custom_mounts.list before making sure file exists -> live-boot:
2014-02-10 11:12:03mikacreate