> Ok. Can you provide output of "ls -l /boot" command and build-initrd.sh > configuration data (the FOO=abc parts at the beginning of the ---cut--- merkur:~# ls -l /boot insgesamt 15237 -rw-r--r-- 1 root root 1070980 2004-10-06 22:47 2.6.8.1-01 -rw-r--r-- 1 root root 1099991 2004-11-06 11:08 2.6.9-01 -rw-r--r-- 1 root root 1099996 2004-11-06 12:19 2.6.9-02 -rwxr-xr-x 1 root root 499188 2004-11-08 23:11 aespipe -rw-r--r-- 1 root root 22558 2004-10-06 22:48 config-2.6.8.1-01 -rw-r--r-- 1 root root 55875 2004-11-11 18:14 config-2.6.8-1-386 -rw-r--r-- 1 root root 22297 2004-11-06 11:09 config-2.6.9-01 -rw-r--r-- 1 root root 22017 2004-11-06 12:19 config-2.6.9-02 -rw-r--r-- 1 root root 36081 2004-11-21 14:09 default.kmap -rwsr-xr-x 1 root root 1154712 2004-11-08 22:59 gpg drwxr-xr-x 2 root root 352 2004-10-05 23:09 grub -rw------- 1 root root 2285 2004-11-22 14:55 initrd.gz -rw-r--r-- 1 root root 4427776 2004-11-21 09:20 initrd.img-2.6.8-1-386 -rwxr-xr-x 1 root root 6160 2004-10-09 02:00 insmod -rwxr-xr-x 1 root root 129868 2004-10-19 19:41 insmod.modutils -rwxr-xr-x 1 root root 90088 2004-10-13 21:40 ld-linux.so.2 -rw-r--r-- 1 root root 12272 2004-07-31 13:50 libcfont.so.0 -rw-r--r-- 1 root root 71836 2004-07-31 13:50 libconsole.so.0 -rw-r--r-- 1 root root 1279300 2004-10-13 21:40 libc.so.6 -rw-r--r-- 1 root root 18288 2004-07-31 13:50 libctutils.so.0 -rwxr-xr-x 1 root root 36888 2004-07-31 13:50 loadkeys -rwxr-xr-x 1 root root 39216 2004-11-06 17:03 losetup drwxr-xr-x 2 root root 72 2004-11-08 23:17 modules-2.6.9-02 -rw------- 1 root root 4219 2004-11-22 14:47 rootkey.gpg -rw-r--r-- 1 root root 818947 2004-10-06 22:48 System.map-2.6.8.1-01 -rw-r--r-- 1 root root 863066 2004-11-11 20:17 System.map-2.6.8-1-386 -rw-r--r-- 1 root root 782820 2004-11-06 11:09 System.map-2.6.9-01 -rw-r--r-- 1 root root 782820 2004-11-06 12:19 System.map-2.6.9-02 -rw-r--r-- 1 root root 1091024 2004-11-11 20:17 vmlinuz-2.6.8-1-386 merkur:~# ---cut--- ---cut--- # 1 = use devfs, 0 = use classic disk-based device names. If this is # enabled (USEDEVFS=1) then setting USEPIVOT=1 is also required and kernel # must be configured with CONFIG_DEVFS_FS=y CONFIG_DEVFS_MOUNT=y USEDEVFS=0 # 1 = use pivot_root, 0 = use old change_root # See above header for root= and append= lilo.conf definitions. # pivot_root is not available on 2.2 and older kernels. # Always enable pivot_root for 2.4 and later kernels. USEPIVOT=1 # Unencrypted /boot partition. If devfs is enabled (USEDEVFS=1), this must # be specified as genuine devfs name. BOOTDEV=/dev/hda1 # /boot partition file system type BOOTTYPE=reiserfs # Encrypted root partition. If devfs is enabled (USEDEVFS=1), this must # be specified as genuine devfs name. CRYPTROOT=/dev/hda7 # root partition file system type ROOTTYPE=reiserfs # Encryption type (AES128 / AES192 / AES256) of root partition CIPHERTYPE=AES256 # Optional password seed for root partition #PSEED="-S XXXXXX" # Optional password iteration count for root partition #ITERCOUNTK="-C 100" # This code is passed to cipher transfer function. LOINIT="-I 0" # 1 = use gpg key file to mount root partition, 0 = use normal key. # If this is enabled (USEGPGKEY=1), file named rootkey.gpg or whatever # GPGKEYFILE is set to must be manually copied to /boot (or to # EXTERNALGPGDEV device if EXTERNALGPGFILES=1). If rootkey.gpg is not # encrypted with symmetric cipher, pubring.gpg and secring.gpg must be # manually copied to /boot (or to EXTERNALGPGDEV device if # EXTERNALGPGFILES=1). USEGPGKEY=1 # gpg key filename. Only used if USEGPGKEY=1 GPGKEYFILE=rootkey.gpg # 1 = mount removable device EXTERNALGPGDEV that contains gpg key files # 0 = don't mount EXTERNALGPGFILES=0 # Device name that contains gpg key files. If devfs is # enabled (USEDEVFS=1), this must be specified as genuine devfs name. # Only used if EXTERNALGPGFILES=1 EXTERNALGPGDEV=/dev/fd0 # Removable device EXTERNALGPGDEV file system type # Only used if EXTERNALGPGFILES=1 EXTERNALGPGTYPE=ext2 # 1 = use loop module, 0 = loop driver linked to kernel USEMODULE=1 # 1 = stop after creating and copying initrd, 0 = also copy tools/libs INITRDONLY=0 # Source root directory where files are copied from SOURCEROOT= # Destination root directory where files are written to DESTINATIONROOT= # dest-dir below dest-root DESTINATIONPREFIX=/boot # Name of created init ram-disk INITRDGZNAME=initrd.gz # Encrypted root loop device index (0 ... 7), 5 == /dev/loop5 # Device index must be one character even if max_loop is greater than 8 # _must_ match /etc/fstab entry: /dev/loop5 / ext2 defaults,xxxx 0 1 ROOTLOOPINDEX=0 # Temporary loop device index used in this script, 7 == /dev/loop7 TEMPLOOPINDEX=7 # Additional loop module parameters. # Example: LOOPMODPARAMS="max_loop=8 lo_prealloc=125,5,200" LOOPMODPARAMS="" # 1 = load national keyboard layout, 0 = don't load # You _must_ manually copy correct keyboard layout to /boot/default.kmap # which must be in uncompressed form. (can not be .gz file) LOADNATIONALKEYB=1 # Initial delay in seconds before /linuxrc attempts to mount /boot # partition. Slow devices (USB dongles) may need some delay. INITIALDELAY=0 # 1 = prompt for BOOT-TOOLS media and ENTER press before mounting /boot # 0 = normal case, don't prompt TOOLSPROMPT=0 # 1 = use "rootsetup" program that executes losetup to initialize loop # 0 = use normal "losetup" program directly to initialize loop # If enabled, rootsetup program (+libs) _must_ be manually copied to /boot. USEROOTSETUP=0 # 1 = use dietlibc to build linuxrc. This permits passing parameters to init. # 0 = use glibc to build linuxrc. This prevents passing parameters to init # and includes hacks that may be incompatible with some versions of glibc. # The dietlibc can be found at http://www.fefe.de/dietlibc/ USEDIETLIBC=1 # 1 = load extra module, 0 = don't load # If this is enabled, module must be manually copied to # /boot/modules-KERNELRELEASE/ directory under name like foomatic.o EXTRAMODULELOAD1=0 EXTRAMODULENAME1="foomatic" EXTRAMODULEPARAMS1="frobnicator=123 fubar=abc" # 1 = load extra module, 0 = don't load EXTRAMODULELOAD2=0 EXTRAMODULENAME2="" EXTRAMODULEPARAMS2="" # 1 = load extra module, 0 = don't load EXTRAMODULELOAD3=0 EXTRAMODULENAME3="" EXTRAMODULEPARAMS3="" # 1 = load extra module, 0 = don't load EXTRAMODULELOAD4=0 EXTRAMODULENAME4="" EXTRAMODULEPARAMS4="" # 1 = load extra module, 0 = don't load EXTRAMODULELOAD5=0 EXTRAMODULENAME5="" EXTRAMODULEPARAMS5="" ### End of options ---cut--- > To get more info why gpg fails, can you apply attached patch to util-linux > and recompile new mount+losetup programs and copy new losetup to /boot > directory? Ok, i will send you this later. Michael - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/