8000 Tang/Clevis - Unable to unlock a second encrypted drive · Issue #518 · latchset/clevis · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Tang/Clevis - Unable to unlock a second encrypted drive #518
Open
@BabaTataKaka

Description

@BabaTataKaka

Hi there.

I want to unlock a second encrypted drive on Ubuntu 22.04 desktop. Both encrypted drive are binned but when I reboot only the system drive is being unlocked. I have to enter the password for the secondary drive.

When I run the following command on the secondary drive, it looks like the binding is successful(it return "test")

echo test | clevis encrypt tang '{"url":"http://tang.server"}' -y | clevis decrypt

Not sure where the problem is. See my settings below.

Crypttab

sda4_crypt UUID=42cc3ec8-d4b1-4ad0-acd6-3100920d48da none luks,discard
secondary_disk_sdb UUID=177846db-5d07-4869-8f7e-f365bb699ef0 none luks,discard

The UUID for secondary_disk_sdb is actually the one for the sdb drive(ls -l /dev/disk/by-uuid/)

Fstab

/dev/mapper/vgubuntu-root / ext4 errors=remount-ro 0 1

UUID=c8ec7a46-6707-4285-b4e4-998682d7ef79 /boot ext4 defaults 0 2

UUID=6DE3-7C4A /boot/efi vfat umask=0077 0 1
/dev/mapper/vgubuntu-swap_1 none swap sw 0 0
/dev/mapper/secondary_disk_sdb /media/secondary_disk_sdb ext4 noatime,nodiratime 0 0

Secondary disk binding

sudo clevis luks list -d /dev/sdb
1: sss '{"t":1,"pins":{"tang":[{"url":"http://10.0.2.11"}]}}'
2: sss '{"t":1,"pins":{"tang":[{"url":"http://10.0.2.8"}]}}'

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0