From: "\"Roland Häder\"" <r.haeder@web.de>
To: gentoo-user@lists.gentoo.org
Subject: Aw: Re: [gentoo-user] dm-crypt + ext4 = where will the journal go?
Date: Tue, 4 Sep 2012 22:05:35 +0200 (CEST) [thread overview]
Message-ID: <trinity-1419b625-62b6-4c34-9110-3bf7d7b850e8-1346789135028@3capp-webde-bs44> (raw)
In-Reply-To: <504651FF.9000506@binarywings.net>
Okay, I have setup so far this:
/dev/sda1 - /boot (unencrypted)
/dev/sda2 - swap (not yet setup, will be encrypted)
/dev/sda3 - / (encrypted)
/dev/sda3 is the underlaying drive, where I used gpg:
# gpg --decrypt key.gpg | cryptsetup --verbose luksFormat /dev/sda3
# gpg --decrypt key.gpg | cryptsetup --verbose luksOpen /dev/sda3 encVol
# dd if=/dev/zero of=/dev/mapper/encVol bs=100M (to avoid filesystem corruption)
# mkfs.ext4 -L root /dev/mapper/encVol
Now I continued as usual with the Gentoo handbook (mount all, copy things on it, etc.)
After I compiled the kernel, emerged cryptsetup on the new system, I editied /boot/grub/grub.conf:
-----------------------------------------------
default 0
timeout 30
splashimage=(hd0,0)/boot/grub/splash.xpm.gz
title Gentoo Linux
root (hd0,0)
kernel /boot/kernel-genkernel-x86-3.3.8-gentoo root=/dev/ram0 crypt_root=/dev/sda3
initrd /boot/initramfs-genkernel-x86-3.3.8-gentoo
-----------------------------------------------
(I read not to use real_root, but crypt_root instead?)
Then I emerged grub as usual (also: # cat /proc/mounts > etc/mtab ) and did: # grub-install --no-floppy /dev/sda
Still as usual. Now it is downloading plymouth (to have some cool things) + dracut (easiest way as I read in wiki).
I also had to expand /etc/make.conf (not /etc/portage/make.conf ??? Is this a mistake in handbook?):
-----------------------------------------------
DRACUT_MODULES="crypt_gpg plymouth"
-----------------------------------------------
Now I really hope, that after I installed dracut on it, that I can boot it and the initrd will be updated. It needs at least some kernel modules (e.g. dm_crypt, ext4, sha512_generic, aes_generic) plus gpg and cryptsetup tools to actually decrypt the hard drive.
Regards,
Roland
next prev parent reply other threads:[~2012-09-04 20:08 UTC|newest]
Thread overview: 40+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-09-03 20:20 [gentoo-user] dm-crypt + ext4 = where will the journal go? "Roland Häder"
2012-09-03 20:36 ` Aw: " "Roland Häder"
2012-09-03 20:52 ` Florian Philipp
2012-09-03 21:23 ` Aw: " "Roland Häder"
2012-09-03 22:12 ` "Roland Häder"
2012-09-04 13:48 ` "Roland Häder"
2012-09-04 14:15 ` Dale
2012-09-04 15:14 ` Alan McKinnon
2012-09-04 15:53 ` Dale
2012-09-04 16:10 ` Michael Mol
2012-09-04 20:09 ` Neil Bothwick
2012-09-04 20:51 ` Florian Philipp
2012-09-04 15:59 ` Aw: Re: " "Roland Häder"
2012-09-04 17:37 ` Aw: " Hinnerk van Bruinehsen
2012-09-04 18:18 ` Florian Philipp
2012-09-04 18:27 ` Michael Mol
2012-09-04 19:09 ` Florian Philipp
2012-09-04 20:05 ` "Roland Häder" [this message]
2012-09-04 20:15 ` Aw: " Hinnerk van Bruinehsen
2012-09-04 18:48 ` Michael Hampicke
2012-09-04 20:08 ` Hinnerk van Bruinehsen
2012-09-04 20:15 ` Neil Bothwick
2012-09-04 18:33 ` Florian Philipp
2012-09-04 19:40 ` Aw: " "Roland Häder"
2012-09-04 19:47 ` Michael Mol
2012-09-04 20:36 ` Florian Philipp
2012-09-04 18:59 ` Florian Philipp
2012-09-04 20:14 ` Neil Bothwick
2012-09-04 20:45 ` Florian Philipp
2012-09-04 21:10 ` Neil Bothwick
2012-09-04 22:03 ` Samurai
2012-09-05 16:04 ` Aw: " "Roland Häder"
2012-09-05 16:12 ` Michael Mol
2012-09-05 18:18 ` Aw: " "Roland Häder"
2012-09-05 22:10 ` Florian Philipp
2012-09-06 14:20 ` Aw: " "Roland Häder"
2012-09-06 15:36 ` "Roland Häder"
2012-09-03 20:40 ` Florian Philipp
2012-09-03 20:52 ` Aw: " "Roland Häder"
2012-09-03 20:51 ` Steve Buzonas
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=trinity-1419b625-62b6-4c34-9110-3bf7d7b850e8-1346789135028@3capp-webde-bs44 \
--to=r.haeder@web.de \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox