Encrypted home partition doesn't decrypt on boot (sh.itjust.works)

submitted 2 months ago by DeltaWingDragon@sh.itjust.works to c/linux4noobs@programming.dev

2 comments fedilink hide all child comments

I just installed a Debian 13 Trixie system on my laptop. I have 5 GPT partitions on 1 terabyte SSD and NO LVM!

partition layout

sda1 vfat 256M   EFI system partition
sda2 ext4 512M   boot partition
sda3 LUKS 460G   encrypted root
--   sda3_crypt  root partition, unlocks with passphrase
sda4 LUKS 465G   encrypted home
--   sda4_crypt  home partition, unlocks with passphrase
sda5 LUKS 4G     encrypted swap
--   sda5_crypt  swap partition, unlocks with keyfile

GRUB works fine, it loads the kernel, then I enter the password to decrypt my root partition. It decrypts correctly, then hangs for 1 minute 30 seconds.

After that, I get this error:

[ TIME ] Timed out waiting for device dev-mapper-sda4_crypt.device - /dev/mapper/sda4_crypt.
[DEPEND] Dependency failed for home.mount - /home/
[DEPEND] Dependency failed for local-fs.target - Local File Systems.
[DEPEND] Dependency failed for systemd-fsck@dev-mapper-sda4_crypt.service - File System Check on /dev/mapper/sda4_crypt.
[ TIME ] Timed out waiting for device dev-mapper-sda5_crypt.device - /dev/mapper/sda5_crypt.
[DEPEND] Dependency failed for dev-mapper-sda5_crypt.swap - /dev/mapper/sda5_crypt.
[DEPEND] Dependency failed for swap.target - Swaps

Not once does it ask me for the password to decrypt my home partition, it just waits until it fails.

you are viewing a single comment's thread
view the rest of the comments

[-] bijectivehomomorphism@programming.dev 1 points 2 months ago* (last edited 2 months ago)

Have you set up your /etc/crypttab to unlock your partitions after unlocking the root partition? I haven't had a setup where I needed to use multiple passphrases for unlocking so I'll leave that part for someone else (if it's even possible, you might have to use a custom encrypt hook?). But otherwise, see this for your keyfile partitions: https://wiki.archlinux.org/title/Dm-crypt/System_configuration#crypttab

Maybe also take a look at the LUKS on LVM section on the Arch wiki for potentially a little more guidance. Just ignore all the LVM instructions of course, they might as well be separate partitions

EDIT: I just noticed you're wanting to encrypt swap, which could be a headache depending on your needs (e.g. do you need hibernation?). See more here: https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption

NOTE: I've provided links to the Arch wiki, but should be largely applicable to your set up

[-] DeltaWingDragon@sh.itjust.works 1 points 2 months ago

Have you set up your /etc/crypttab

Yes, yes I have!

(e. g. do you need hibernation?)

No, I do not.

this post was submitted on 04 Feb 2025

14 points (100.0% liked)

linux4noobs

1576 readers

5 users here now

linux4noobs

Noob Friendly, Expert Enabling

Whether you're a seasoned pro or the noobiest of noobs, you've found the right place for Linux support and information. With a dedication to supporting free and open source software, this community aims to ensure Linux fits your needs and works for you. From troubleshooting to tutorials, practical tips, news and more, all aspects of Linux are warmly welcomed. Join a community of like-minded enthusiasts and professionals driving Linux's ongoing evolution.

Seeking Support?

Mention your Linux distro and relevant system details.
Describe what you've tried so far.
Share your solution even if you found it yourself.
Do not delete your post. This allows other people to see possible solutions if they have a similar problem.
Properly format any scripts, code, logs, or error messages.
Be mindful to omit any sensitive information such as usernames, passwords, IP addresses, etc.

Community Rules

Keep discussions respectful and amiable. This community is a space where individuals may freely inquire, exchange thoughts, express viewpoints, and extend help without encountering belittlement. We were all a noob at one point. Differing opinions and ideas is a normal part of discourse, but it must remain civil. Offenders will be warned and/or removed.
Posts must be Linux oriented
Spam or affiliate links will not be tolerated.

founded 2 years ago

MODERATORS

PlutoParty@programming.dev