How to auto mount a partition during initramfs/inird phase?
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I have an encrypted Debian linux system. I also try to detach the LUKS header from the encrypted container. The whole /boot/
partition will be stored on a separate device. I thought I could place the LUKS header under /boot/header/luks.img
, but during the initramfs/initrd phase this path doesn't exists because the /boot/
partition isn't mounted yet.
So the question is how to automatically mount the /boot/
partition before the system tries to open the encrypted device? Or is there any other (or better) way to make it work?
debian encryption boot-loader luks initramfs
add a comment |Â
up vote
0
down vote
favorite
I have an encrypted Debian linux system. I also try to detach the LUKS header from the encrypted container. The whole /boot/
partition will be stored on a separate device. I thought I could place the LUKS header under /boot/header/luks.img
, but during the initramfs/initrd phase this path doesn't exists because the /boot/
partition isn't mounted yet.
So the question is how to automatically mount the /boot/
partition before the system tries to open the encrypted device? Or is there any other (or better) way to make it work?
debian encryption boot-loader luks initramfs
Does /etc/crypttab get it working right? I think there's a "load first or second" option that might help, but I'm not able to check/search now, if crypttab isn't too "late" already
â Xen2050
Mar 16 at 21:55
It's a little bit complicated setup when you want to make it work the way I wanted to. I've managed to do it ultimately. See the answer
â Mikhail Morfikov
Mar 16 at 23:34
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have an encrypted Debian linux system. I also try to detach the LUKS header from the encrypted container. The whole /boot/
partition will be stored on a separate device. I thought I could place the LUKS header under /boot/header/luks.img
, but during the initramfs/initrd phase this path doesn't exists because the /boot/
partition isn't mounted yet.
So the question is how to automatically mount the /boot/
partition before the system tries to open the encrypted device? Or is there any other (or better) way to make it work?
debian encryption boot-loader luks initramfs
I have an encrypted Debian linux system. I also try to detach the LUKS header from the encrypted container. The whole /boot/
partition will be stored on a separate device. I thought I could place the LUKS header under /boot/header/luks.img
, but during the initramfs/initrd phase this path doesn't exists because the /boot/
partition isn't mounted yet.
So the question is how to automatically mount the /boot/
partition before the system tries to open the encrypted device? Or is there any other (or better) way to make it work?
debian encryption boot-loader luks initramfs
asked Mar 15 at 19:48
Mikhail Morfikov
4,290114067
4,290114067
Does /etc/crypttab get it working right? I think there's a "load first or second" option that might help, but I'm not able to check/search now, if crypttab isn't too "late" already
â Xen2050
Mar 16 at 21:55
It's a little bit complicated setup when you want to make it work the way I wanted to. I've managed to do it ultimately. See the answer
â Mikhail Morfikov
Mar 16 at 23:34
add a comment |Â
Does /etc/crypttab get it working right? I think there's a "load first or second" option that might help, but I'm not able to check/search now, if crypttab isn't too "late" already
â Xen2050
Mar 16 at 21:55
It's a little bit complicated setup when you want to make it work the way I wanted to. I've managed to do it ultimately. See the answer
â Mikhail Morfikov
Mar 16 at 23:34
Does /etc/crypttab get it working right? I think there's a "load first or second" option that might help, but I'm not able to check/search now, if crypttab isn't too "late" already
â Xen2050
Mar 16 at 21:55
Does /etc/crypttab get it working right? I think there's a "load first or second" option that might help, but I'm not able to check/search now, if crypttab isn't too "late" already
â Xen2050
Mar 16 at 21:55
It's a little bit complicated setup when you want to make it work the way I wanted to. I've managed to do it ultimately. See the answer
â Mikhail Morfikov
Mar 16 at 23:34
It's a little bit complicated setup when you want to make it work the way I wanted to. I've managed to do it ultimately. See the answer
â Mikhail Morfikov
Mar 16 at 23:34
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
0
down vote
Basically, this setup won't work OOTB because you have to mount some partition (in this case /boot/) in the initramfs/initrd phase, and by default there's no partition mounted there. Without the /boot/ partition you can't use the LUKS header. So the only way to make it work is to write some custom scripts that will mount/unmount the partition in the initramfs/initrd phase.
I've manage to write some HowTo on this subject, and the setup works really great.
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
0
down vote
Basically, this setup won't work OOTB because you have to mount some partition (in this case /boot/) in the initramfs/initrd phase, and by default there's no partition mounted there. Without the /boot/ partition you can't use the LUKS header. So the only way to make it work is to write some custom scripts that will mount/unmount the partition in the initramfs/initrd phase.
I've manage to write some HowTo on this subject, and the setup works really great.
add a comment |Â
up vote
0
down vote
Basically, this setup won't work OOTB because you have to mount some partition (in this case /boot/) in the initramfs/initrd phase, and by default there's no partition mounted there. Without the /boot/ partition you can't use the LUKS header. So the only way to make it work is to write some custom scripts that will mount/unmount the partition in the initramfs/initrd phase.
I've manage to write some HowTo on this subject, and the setup works really great.
add a comment |Â
up vote
0
down vote
up vote
0
down vote
Basically, this setup won't work OOTB because you have to mount some partition (in this case /boot/) in the initramfs/initrd phase, and by default there's no partition mounted there. Without the /boot/ partition you can't use the LUKS header. So the only way to make it work is to write some custom scripts that will mount/unmount the partition in the initramfs/initrd phase.
I've manage to write some HowTo on this subject, and the setup works really great.
Basically, this setup won't work OOTB because you have to mount some partition (in this case /boot/) in the initramfs/initrd phase, and by default there's no partition mounted there. Without the /boot/ partition you can't use the LUKS header. So the only way to make it work is to write some custom scripts that will mount/unmount the partition in the initramfs/initrd phase.
I've manage to write some HowTo on this subject, and the setup works really great.
answered Mar 16 at 23:33
Mikhail Morfikov
4,290114067
4,290114067
add a comment |Â
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f430475%2fhow-to-auto-mount-a-partition-during-initramfs-inird-phase%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Does /etc/crypttab get it working right? I think there's a "load first or second" option that might help, but I'm not able to check/search now, if crypttab isn't too "late" already
â Xen2050
Mar 16 at 21:55
It's a little bit complicated setup when you want to make it work the way I wanted to. I've managed to do it ultimately. See the answer
â Mikhail Morfikov
Mar 16 at 23:34