Friday, June 5, 2009

Make OpenSUSE 11.1 ask for encrypted volume password during boot

11.1 is the first version of OpenSUSE where I've had to follow these steps, specifically the last part about adjusting the system services. If you have an encrypted filesystem in your /etc/crypttab and /etc/fstab, but don't adjust the system services, then it won't ask for your password on boot and the boot will fail when it tries to mount the encrypted partitions.

If you have a LUKS encrypted filesystem and you want to mount it during boot, then you'll need to add an entry to /etc/fstab like this:

/dev/mapper/DEVICE /MOUNTPOINT ext3 defaults 0 0

An entry to /etc/crypttab like this:

DEVICE /dev/disk/by-id/DISK none none

And turn on the boot.crypto-early service in YaST. Go to YaST, then "System", and then "System Services (Runlevel)".

Turn on expert mode and then for the boot.crypto-early service, enable it for boot, "B".

Hit "Ok" and you're done.

No comments:

Post a Comment