Full system encryption using cryptsetup and LUKS fails

Questions about other topics - please check if your question fits better in another category before posting here
Forum rules
Before you post please read how to get help
daniel_L
Level 1
Level 1
Posts: 3
Joined: Thu Aug 23, 2007 8:38 am

Full system encryption using cryptsetup and LUKS fails

Postby daniel_L » Thu Aug 23, 2007 8:53 am

Hey forum!

The last few days I spend some time on encrypting my whole system (excepting /boot, of course) using cryptsetup and LUKS, following this german wiki guide for Ubuntu 7.04 (which is currently not reachable).

Anyway, after following the steps I came to the point where I had to encrypt / by executing the following command:

Code: Select all

sudo cryptsetup -c aes-lrw-benebi -y -s 384 luksFormat /dev/hda7


After some minutes the following error message appeared:

Code: Select all

Rendezvous with udev timed out for 'temporary-cryptsetup-6162'; stat failed: No such file or directory
Failed to setup dm-crypt key mapping.
Check kernel for support for the aes-lrw-benebi cipher spec and verify that /dev/hda7 contains at least 383 sectors.
Failed to write to key storage.
Aufruf fehlgeschlagen.


The only solution I was able to find is to load the module cryptmgr with modprobe. But: modprobe cryptmgr results in the following error message:

Code: Select all

FATAL: Module cryptomgr not found.


Is it possible, that this is a Mint problem? In the discussion thread on the above mentioned guide, none of the Feisty users ran into a problem. After executing the cryptsetup[...] command, / got encrypted.

Any comments are appreciated :)

Greetings, Daniel

Husse
Level 23
Level 23
Posts: 19593
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Postby Husse » Sun Aug 26, 2007 5:23 pm

The only solution I was able to find is to load the module cryptmgr with modprobe. But: modprobe cryptmgr results in the following error message:
Code:
FATAL: Module cryptomgr not found.

Now if you look at the quotation you'll se that you are not talking about the same file - is it cryptomgr or cryptmgr?
I don't see anything Mint specific causing this, but it isa a rather special piece of software...
Image
Don't fix it if it ain't broken, don't break it if you can't fix it

daniel_L
Level 1
Level 1
Posts: 3
Joined: Thu Aug 23, 2007 8:38 am

Postby daniel_L » Mon Aug 27, 2007 12:29 am

Oops. Just a typo - cryptomgr was meant both times.

Husse
Level 23
Level 23
Posts: 19593
Joined: Sun Feb 11, 2007 7:22 am
Location: Near Borås Sweden

Postby Husse » Mon Aug 27, 2007 5:56 am

Oops. Just a typo

I expected as much :)
But sometimes you make the typo where it affects the result. Is there a home page and a forum for the crypto program?
If so, I think you should ask there.
This is rather special and beyond my knowledge.....
But let's hope someone else has an answer
Image
Don't fix it if it ain't broken, don't break it if you can't fix it

daniel_L
Level 1
Level 1
Posts: 3
Joined: Thu Aug 23, 2007 8:38 am

Postby daniel_L » Mon Aug 27, 2007 8:11 am

AFAIK there's just a wiki for cryptsetup.

Anyway, I'm now looking for a way to fully encrypt my system (/, /home, swap; /boot won't be encrypted) using Truecrypt (which I already use for my external drives and under Windows and which I prefer to cryptsetup because of it's much better plausible deniability strategy). The crux is to decrypt these partitions while booting up...I guess I have to patch the kernel (e.g. add Truecrypt and some kind of script which after asking for the passwords decrypts the partitions before they are needed in the booting process). But my linux knowledge is still too limited to accomplish that :(

In the guide (here you can find an english version) this is being done by cryptsetup - it installs some scripts or stuff. So it is possible - somehow.

However, thanks for your answers :)


Return to “Other topics”

Who is online

Users browsing this forum: No registered users and 3 guests