Mount a LUKS partition at boot

Question

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home.

I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm able to mount the /home using:

mkdir /media/home
sudo cryptsetup luksOpen /dev/sda2 home
sudo mount -t ext3 /dev/mapper/home /media/home

The problem is, this cryptfs mapper disappears after boot, so I putting the appropriate line in fstab fails.

How do I set the cryptfs to prompt for password and unlock the drive at boot?

Thanks,

Adam

score 17 · Accepted Answer · answered Jan 11 '11 at 10:54

17

Seems that I needed to edit the /etc/crypttab file, which is the crypto equivalent to fstab, and add the following line:

# create a /dev/mapper device for the encrypted drive
home    /dev/sda2       none luks

And add the following to /etc/fstab:

# /home LUKS
/dev/mapper/home /home ext4 rw 0 0

Now I get two password prompts at boot, as needed.

answered Jan 11 '11 at 10:54

Adam Matan

4

you would also have to update the initramfs image with update-initramfs for this change to take effect. – dward Mar 17 '13 at 07:10
Is this still applicable for Ubuntu 20.04? – Johnny Utahh Jul 09 '20 at 01:12
Answering my own (immediately above) question: our initial tests show that it (this answer) does still apply and work on 20.04. – Johnny Utahh Jul 09 '20 at 09:42

score -3 · Answer 2 · answered Nov 10 '11 at 23:01

-3

I had the same problem!! However, everything is taken care of after this command! You should try it out :-)

sudo update-initramfs -u -k all

answered Nov 10 '11 at 23:01

Tim

6

Care to explain what that command does? – Flimm Nov 10 '11 at 23:42
1

@Flimm , the command re-create your ramdisk , for all the kernel installed. You might configured crypttab , but this needs to be copied into your ramdisk , if you use a crypted root – daisy Apr 25 '12 at 12:00
2

This answer should include an in-depth explanation, it is not clear that it relates to the question at all. – Langston Jul 28 '15 at 03:37

2 Answers2