missing Support for /etc/crypttab

[buddy-78]

Hi,

I want to decrypt two disks with same LUKS passphrase.
On my second disk is the /home partition.

crypttab / fstab.
secret UUID=<UUID> none luks,keyscript=decrypt_keyctl

With dracut-made initramfs both disk were opened by cryptsetup and mounted while booting.
With ugrd-made initramfs second disk is not opened by cryptsetup.

Thanks for any advices

[desultory]

Hi,

I want to decrypt two disks with same LUKS passphrase. On my second disk is the /home partition.

crypttab / fstab. secret UUID=<UUID> none luks,keyscript=decrypt_keyctl

With dracut-made initramfs both disk were opened by cryptsetup and mounted while booting. With ugrd-made initramfs second disk is not opened by cryptsetup.

Thanks for any advices

ugrd does not handle using crypttab, it will autodetect LUKS devices (if they are used for the root device).

You can manually define entries in the config like:

[cryptsetup.<device name>]
uuid  = <uuid>

so something like

[cryptsetup.othermount]
uuid = "aaaa-bbbb-cccc-dddd-eeee-ffff"

I'd recommend only handling the main root mount with ugrd, and letting the "real" init handle other mounts.

Is this for something like a /usr or /var mount?

I think 2.0.0+ should autodetect /usr, /var, and /etc mounts totally automatically, it may not function for LUKS backed devices (it should be able to)

[buddy-78]

Thank You for your fast response!
How do I passthrough the (key-entered) passphrase to the "real" init handle ?
This is for /home

[desultory]

Thank You for your fast response! How do I passthrough the (key-entered) passphrase to the "real" init handle ? This is for /home

I'm not too familiar with systemd, but does it have some service which can do the cryptsetup stuff itself? I mean, this should be roughly equivalent to if you had an unencrypted root, no initramfs, and a simple /home LUKS device which could be handled shortly after the system starts.

On openrc it works like this, with /etc/conf.d/dmcrypt being the rough equivalent to /etc/crypttab:
https://wiki.gentoo.org/wiki/Dm-crypt#Configuring_dm-crypt