booster: Fail to unlock LUKS by password
I’m booting Arch with a booster UKI bundled with sbctl
(maybe this is causing the issue?) and have LVM on LUKS for root partition. Booster is asking for the passphrase but no matter what it always fails.
My password does not have any special character but I enabled vconsole anyway to see if it was a problem with the keymap, but the same. I’ve also tried to add a very simple password entry but it also fails. The LUKS partition is ok because I’m currently able to boot through a dracut image. I don’t know if booster works on my machine bundling the image with a bootloader because I have an encrypted boot and it’s a bit more complicated to configure anything that is not an UKI.
This is the current config:
enable_lvm: true
strip: false
universal: true
mount_timeout: 1m
vconsole: true
extra_files: busybox,fsck,fsck.ext4
EDIT: commands to generate the image:
sudo booster build -f /boot/booster-linux.img
sudo sbctl bundle -a /boot/amd-ucode.img -f /boot/booster-linux.img /efi/Linux/archlinux.efi
and the content of /etc/kernel/cmdline
which is sourced by sbctl
:
rd.luks.name=UUID=cryptolvm rd.luks.options=discard root=/dev/mapper/root rootfstype=ext4 rootflags=rw,relatime,data=ordered
About this issue
- Original URL
- State: open
- Created a year ago
- Comments: 16 (8 by maintainers)
Commits related to this issue
- luks2: Take digest length to be compared from expected digest LUKS1 was limited to a 20 byte digest length. With LUKS2 this limitation was lifted. However, it seems that for LUKS volumes which were c... — committed to nmeum/luks.go by nmeum 6 months ago
- luks2: Take digest length to be compared from expected digest LUKS1 was limited to a 20 byte digest length. With LUKS2 this limitation was lifted. However, it seems that for LUKS volumes which were c... — committed to nmeum/luks.go by nmeum 6 months ago
I debugged this further and this seems to be a bug in luks.go.
See: https://github.com/anatol/luks.go/issues/11