Re: Problem with root filesystem encryption

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Ok. Can you provide output of "ls -l /boot" command and build-initrd.sh
> configuration data (the FOO=abc parts at the beginning of the

---cut---
merkur:~# ls -l /boot
insgesamt 15237
-rw-r--r--  1 root root 1070980 2004-10-06 22:47 2.6.8.1-01
-rw-r--r--  1 root root 1099991 2004-11-06 11:08 2.6.9-01
-rw-r--r--  1 root root 1099996 2004-11-06 12:19 2.6.9-02
-rwxr-xr-x  1 root root  499188 2004-11-08 23:11 aespipe
-rw-r--r--  1 root root   22558 2004-10-06 22:48 config-2.6.8.1-01
-rw-r--r--  1 root root   55875 2004-11-11 18:14 config-2.6.8-1-386
-rw-r--r--  1 root root   22297 2004-11-06 11:09 config-2.6.9-01
-rw-r--r--  1 root root   22017 2004-11-06 12:19 config-2.6.9-02
-rw-r--r--  1 root root   36081 2004-11-21 14:09 default.kmap
-rwsr-xr-x  1 root root 1154712 2004-11-08 22:59 gpg
drwxr-xr-x  2 root root     352 2004-10-05 23:09 grub
-rw-------  1 root root    2285 2004-11-22 14:55 initrd.gz
-rw-r--r--  1 root root 4427776 2004-11-21 09:20 initrd.img-2.6.8-1-386
-rwxr-xr-x  1 root root    6160 2004-10-09 02:00 insmod
-rwxr-xr-x  1 root root  129868 2004-10-19 19:41 insmod.modutils
-rwxr-xr-x  1 root root   90088 2004-10-13 21:40 ld-linux.so.2
-rw-r--r--  1 root root   12272 2004-07-31 13:50 libcfont.so.0
-rw-r--r--  1 root root   71836 2004-07-31 13:50 libconsole.so.0
-rw-r--r--  1 root root 1279300 2004-10-13 21:40 libc.so.6
-rw-r--r--  1 root root   18288 2004-07-31 13:50 libctutils.so.0
-rwxr-xr-x  1 root root   36888 2004-07-31 13:50 loadkeys
-rwxr-xr-x  1 root root   39216 2004-11-06 17:03 losetup
drwxr-xr-x  2 root root      72 2004-11-08 23:17 modules-2.6.9-02
-rw-------  1 root root    4219 2004-11-22 14:47 rootkey.gpg
-rw-r--r--  1 root root  818947 2004-10-06 22:48 System.map-2.6.8.1-01
-rw-r--r--  1 root root  863066 2004-11-11 20:17 System.map-2.6.8-1-386
-rw-r--r--  1 root root  782820 2004-11-06 11:09 System.map-2.6.9-01
-rw-r--r--  1 root root  782820 2004-11-06 12:19 System.map-2.6.9-02
-rw-r--r--  1 root root 1091024 2004-11-11 20:17 vmlinuz-2.6.8-1-386
merkur:~#
---cut---

---cut---
# 1 = use devfs, 0 = use classic disk-based device names. If this is
# enabled (USEDEVFS=1) then setting USEPIVOT=1 is also required and kernel
# must be configured with CONFIG_DEVFS_FS=y CONFIG_DEVFS_MOUNT=y
USEDEVFS=0

# 1 = use pivot_root, 0 = use old change_root
# See above header for root= and append= lilo.conf definitions.
# pivot_root is not available on 2.2 and older kernels.
# Always enable pivot_root for 2.4 and later kernels.
USEPIVOT=1

# Unencrypted /boot partition. If devfs is enabled (USEDEVFS=1), this must
# be specified as genuine devfs name.
BOOTDEV=/dev/hda1

# /boot partition file system type
BOOTTYPE=reiserfs

# Encrypted root partition. If devfs is enabled (USEDEVFS=1), this must
# be specified as genuine devfs name.
CRYPTROOT=/dev/hda7

# root partition file system type
ROOTTYPE=reiserfs

# Encryption type (AES128 / AES192 / AES256) of root partition
CIPHERTYPE=AES256

# Optional password seed for root partition
#PSEED="-S XXXXXX"

# Optional password iteration count for root partition
#ITERCOUNTK="-C 100"

# This code is passed to cipher transfer function.
LOINIT="-I 0"

# 1 = use gpg key file to mount root partition, 0 = use normal key.
# If this is enabled (USEGPGKEY=1), file named rootkey.gpg or whatever
# GPGKEYFILE is set to must be manually copied to /boot (or to
# EXTERNALGPGDEV device if EXTERNALGPGFILES=1). If rootkey.gpg is not
# encrypted with symmetric cipher, pubring.gpg and secring.gpg must be
# manually copied to /boot (or to EXTERNALGPGDEV device if
# EXTERNALGPGFILES=1).
USEGPGKEY=1

# gpg key filename. Only used if USEGPGKEY=1
GPGKEYFILE=rootkey.gpg

# 1 = mount removable device EXTERNALGPGDEV that contains gpg key files
# 0 = don't mount
EXTERNALGPGFILES=0

# Device name that contains gpg key files. If devfs is
# enabled (USEDEVFS=1), this must be specified as genuine devfs name.
# Only used if EXTERNALGPGFILES=1
EXTERNALGPGDEV=/dev/fd0

# Removable device EXTERNALGPGDEV file system type
# Only used if EXTERNALGPGFILES=1
EXTERNALGPGTYPE=ext2

# 1 = use loop module, 0 = loop driver linked to kernel
USEMODULE=1

# 1 = stop after creating and copying initrd, 0 = also copy tools/libs
INITRDONLY=0

# Source root directory where files are copied from
SOURCEROOT=

# Destination root directory where files are written to
DESTINATIONROOT=

# dest-dir below dest-root
DESTINATIONPREFIX=/boot

# Name of created init ram-disk
INITRDGZNAME=initrd.gz

# Encrypted root loop device index (0 ... 7), 5 == /dev/loop5
# Device index must be one character even if max_loop is greater than 8
# _must_ match /etc/fstab entry:   /dev/loop5  /  ext2  defaults,xxxx  0  1
ROOTLOOPINDEX=0

# Temporary loop device index used in this script, 7 == /dev/loop7
TEMPLOOPINDEX=7

# Additional loop module parameters.
# Example: LOOPMODPARAMS="max_loop=8 lo_prealloc=125,5,200"
LOOPMODPARAMS=""

# 1 = load national keyboard layout, 0 = don't load
# You _must_ manually copy correct keyboard layout to /boot/default.kmap
# which must be in uncompressed form. (can not be .gz file)
LOADNATIONALKEYB=1

# Initial delay in seconds before /linuxrc attempts to mount /boot
# partition. Slow devices (USB dongles) may need some delay.
INITIALDELAY=0

# 1 = prompt for BOOT-TOOLS media and ENTER press before mounting /boot
# 0 = normal case, don't prompt
TOOLSPROMPT=0

# 1 = use "rootsetup" program that executes losetup to initialize loop
# 0 = use normal "losetup" program directly to initialize loop
# If enabled, rootsetup program (+libs) _must_ be manually copied to /boot.
USEROOTSETUP=0

# 1 = use dietlibc to build linuxrc. This permits passing parameters to
init.
# 0 = use glibc to build linuxrc. This prevents passing parameters to init
# and includes hacks that may be incompatible with some versions of glibc.
# The dietlibc can be found at http://www.fefe.de/dietlibc/
USEDIETLIBC=1

# 1 = load extra module, 0 = don't load
# If this is enabled, module must be manually copied to
# /boot/modules-KERNELRELEASE/ directory under name like foomatic.o
EXTRAMODULELOAD1=0
EXTRAMODULENAME1="foomatic"
EXTRAMODULEPARAMS1="frobnicator=123 fubar=abc"
# 1 = load extra module, 0 = don't load
EXTRAMODULELOAD2=0
EXTRAMODULENAME2=""
EXTRAMODULEPARAMS2=""
# 1 = load extra module, 0 = don't load
EXTRAMODULELOAD3=0
EXTRAMODULENAME3=""
EXTRAMODULEPARAMS3=""
# 1 = load extra module, 0 = don't load
EXTRAMODULELOAD4=0
EXTRAMODULENAME4=""
EXTRAMODULEPARAMS4=""
# 1 = load extra module, 0 = don't load
EXTRAMODULELOAD5=0
EXTRAMODULENAME5=""
EXTRAMODULEPARAMS5=""

### End of options
---cut---

> To get more info why gpg fails, can you apply attached patch to util-linux
> and recompile new mount+losetup programs and copy new losetup to /boot
> directory?

Ok, i will send you this later.

Michael


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/


[Index of Archives]     [Kernel]     [Linux Crypto]     [Gnu Crypto]     [Gnu Classpath]     [Netfilter]     [Bugtraq]
  Powered by Linux