Encrypted Root with F11

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I apologize if this has been asked before, I checked the most recent
archives and didn't find anything.

I've successfully set up two separate LUKS encrypted logical-volumes,
one for home and one for root. Everything appeared to be working
fine, until I tried to delete my old root logical-volume and found
out it was still in use: the kernel was using it as the root,
even though mount had then replaced it at / with the encrypted
one. So I tried simply changing the root parameter to the kernel
(from grub.conf) so it points to the encrypted one, but when I
boot, the startup routine stops after a little while and just
hangs there until I ctrl-alt-del, and then it restarts. I don't
think it's reaching init, because I haven't seen any of the usual
"Starting some server... [OK]" messages. I guess that makes sense
if it's failing to load the root device, it wouldn't get to init.

So can anyone help me get this set up properly? I have a basic
understanding of the boot process and I guess that something needs
to be changed in initrd to tell it to unlock the encrypted root
disk before mounting it. But I have no idea how to do that.

On a related note, can anyone explain what's actually required
of the root FS loaded by the kernel? I tried setting up just a
1GB empty ext3 filesystem to use as the root, and then let mount
replace it with the encrypted one once init starts, but this also
caused the startup process to hang: apparently having a filesystem
alone is insufficient, there actually needs to be some stuff on it?

I'm using Fedora 11 on a Compaq Presario laptop (x86).

Many thanks for any help,
- -Brian

- --
Feel free to contact me using PGP Encryption:
Key Id: 0x3AA70848
Available from: http://keys.gnupg.net


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJKQ3DgAAoJEHOUulIkSI7cJQgH/0V4qxE9hMJaLK/79tsczNmP
sDf48rhd0dJGhF+cvHtQg+57F3j0GX6nHYvD6810xApd5eTzALJ2/Ug6BOgC2aL5
dw+kw6rebquyXDCrknsAavxWZNkRJYooTguOSSPIwP2815aAG7wWoecqR+ESzaO3
yQfLM5tUPo+xVkBdlC8NS+UO9+nKFXlfTTO1qCexutwxsJdwSvXJvZ4Hiu2r68jz
7PAtr4QkR1PSUyxpTY08wcZV39s1F+X9WzE99lKoz/KjHymLvSOrkW8kS7OSAyoH
EK5AfujeZ85HMu1Hf2bw4D6OgSq9l2yHTZ8yZpQEIPNrv0+/36JijmN/2MLz4Xs=
=1Na5
-----END PGP SIGNATURE-----

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux