[arch-general] Kpartx should be in the repos and archiso for enabling encrypted GPT install

Bruno Pagani bruno.n.pagani at gmail.com
Sun Jan 13 17:26:33 UTC 2019


Le 13/01/2019 à 17:56, Neven Sajko via arch-general a écrit :

> To mount a root GPT partition which resides on an encrypted disk, one
> needs the kpartx tool to make the mapping for the partition (the kernel
> does not independently make those for partitions on device mapper maps,
> which is what a dm-crypt decrypted device is). Thus kpartx needs to be
> on the Archlinux installation ISO to enable that kind of setup.
>
> It would of course first be necessary for an Archlinux Developer or
> Trusted User to adopt kpartx, so I hope there is somebody willing to do
> this ...? Note that kpartx is a common utility and in its own package
> across a lot of distributions; like Debian, Ubuntu, Fedora, OpenSUSE,
> ...
>
> Note: it may be possible to use losetup instead of kpartx so as to make
> a loop device instead of a device map, but that would come with an
> overhead? Another alternative setup, perhaps more widely used, is
> having encrypted LVM. While this does not require kpartx, LVM may be
> undesireable because of its complexity and requiring multiple userspace
> daemons beside Udev.

You don’t need kpartx though. Neither losetup or LVM. I did several
encrypted GPT install without any of them, so I’m pretty confident about
this.

Could you instead describe your actual issue that make you think kpartx
is required?

Regards,
Bruno


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20190113/729f49e1/attachment.asc>


More information about the arch-general mailing list