Skip to main content
Rollback to Revision 1
Source Link
Kusalananda
  • 355.8k
  • 42
  • 735
  • 1.1k

How to configure grub to boot from encrypted lvm partition [SOLVED]

After entering passphrase GRUB failsI try to open partitioninstall Grub manually after Devuan installation, but I guess there is an error in configuration.

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not foundetc/default/grub

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

BootI boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION] -----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalidBut after entering passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format: I receive

cryptsetupinvalid luksConvertKeypassphrase --pbkdf
no pbkdf2such <device>cryptodisk found
disk ‘lvmid/..............’ not found

link

How to configure grub to boot from encrypted lvm partition [SOLVED]

After entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION] -----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

How to configure grub to boot from encrypted lvm partition

I try to install Grub manually after Devuan installation, but I guess there is an error in configuration.

/etc/default/grub
GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

I boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

But after entering passphrase I receive

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found
added 1 character in body
Source Link

After entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION]  -----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

After entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION]-----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

After entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION]  -----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

edited body
Source Link

afterAfter entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION]-----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

after entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION]-----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

After entering passphrase GRUB fails to open partition

invalid passphrase 
no such cryptodisk found
disk ‘lvmid/..............’ not found

/etc/default/grub

GRUB_CMDLINE_LINUX=”cryptdevice=/dev/sda5:devuan-root:allow-discard”
GRUB_ENABLE_CRYPTODISK=yes

Boot from CD

cryptsetup luksOpen /dev/sda5 somename
mount --bind /dev /mnt/dev
mount --bind /proc /mnt/proc
mount --bind /sys /mnt/sys
chroot /mnt/
grub-install --target=i386-pc /dev/sda

[SOLUTION]-----------

GRUB 2.12 doesn't support decrypting an ARGON2ID keyslot; it will immediately say invalid passphrase, when usually GRUB takes some time to decrypt (due to SSE registers being disabled in GRUB). Convert it to PBKDF2 format:

cryptsetup luksConvertKey --pbkdf pbkdf2 <device> 

link

deleted 25 characters in body
Source Link
Loading
added 29 characters in body
Source Link
Loading
added 320 characters in body
Source Link
Loading
edited title
Link
Loading
Post Undeleted by normal_max
Post Deleted by normal_max
Source Link
Loading