[arch-general] migrating crypttab to new way / luks swap problem
I am fully up to date on testing repo. I have a laptop with encrypted /home and swap. Both are luks. When I convert /etc/cryptab /home works fine but swap fails at boot time with Unlocking of swap failed. Legacy /etc/cryptab (works but get legacy warnings) home /dev/sda5 ASK swap /dev/sda7 ASK New /etc/cryttab (swap fails) home /dev/sda5 none luks,timeout=0 swap /dev/sda7 none swap,luks Can anyone suggest how I can fix my swap line? thanks! gene
If you do man crypttab, there's an example for swap at the bottom. It is
swap /dev/sda7 /dev/urandom swap
HTH
On Wed, Aug 1, 2012 at 10:14 AM, Genes MailLists
I am fully up to date on testing repo. I have a laptop with encrypted /home and swap. Both are luks. When I convert /etc/cryptab /home works fine but swap fails at boot time with
Unlocking of swap failed.
Legacy /etc/cryptab (works but get legacy warnings)
home /dev/sda5 ASK swap /dev/sda7 ASK
New /etc/cryttab (swap fails)
home /dev/sda5 none luks,timeout=0 swap /dev/sda7 none swap,luks
Can anyone suggest how I can fix my swap line?
thanks!
gene
-- Aurko Roy GPG key: 0x20C5BC31 Fingerprint:76B4 9677 15BE 731D 1949 85BA 2A31 B442 20C5 BC31
On 08/01/2012 02:00 AM, Aurko Roy wrote:
If you do man crypttab, there's an example for swap at the bottom. It is
swap /dev/sda7 /dev/urandom swap
Thanks, I am aware of that, but I have luks on my swap partition so that won't work. I want to be prompted for a password. luks is also required if you want to hibernate - the /dev/urandom way cannot be used to hibernate (for obvious reasons). gene/
On Wed, Aug 01, 2012 at 07:09:37 -0400, Genes MailLists wrote:
On 08/01/2012 02:00 AM, Aurko Roy wrote:
If you do man crypttab, there's an example for swap at the bottom. It is
swap /dev/sda7 /dev/urandom swap
Thanks, I am aware of that, but I have luks on my swap partition so that won't work. I want to be prompted for a password. luks is also required if you want to hibernate - the /dev/urandom way cannot be used to hibernate (for obvious reasons).
The "swap" example reinitializes the encrypted block device at boot and does mkswap on that. You want neither, just use "luks" as for your other partition. Geert -- geert.hendrickx.be :: geert@hendrickx.be :: PGP: 0xC4BB9E9F This e-mail was composed using 100% recycled spam messages!
On 08/01/2012 07:23 AM, Geert Hendrickx wrote:
The "swap" example reinitializes the encrypted block device at boot and does mkswap on that. You want neither, just use "luks" as for your other partition.
Geert
Ah that makes complete sense - thank you. I'll test shortly. gene/
participants (3)
-
Aurko Roy
-
Geert Hendrickx
-
Genes MailLists