How to make cryptsetup abandon a drive once password limit is reached?
I would like to set up my encrypted root partition so that it can decrypt automatically if my USB flash drive with a keyfile is present, but ask for a password otherwise. There is one thing preventing me from getting it set up though: if a password entry fails (because the USB stick isn't present) cryptsetup goes into sleep.
How can I make it abandon the attempt and move onto the next line of crypttab (which is decrypting with manual password entry) instead?
Thanks for your help!
boot usb password encryption cryptsetup
asked Jan 1 at 13:10
totalolagetotalolage
62
add a comment |
I would like to set up my encrypted root partition so that it can decrypt automatically if my USB flash drive with a keyfile is present, but ask for a password otherwise. There is one thing preventing me from getting it set up though: if a password entry fails (because the USB stick isn't present) cryptsetup goes into sleep.
How can I make it abandon the attempt and move onto the next line of crypttab (which is decrypting with manual password entry) instead?
Thanks for your help!
boot usb password encryption cryptsetup
asked Jan 1 at 13:10
totalolagetotalolage
62
Have you tried addingnofailas an option incrypttab(I've not tested this on my system)
– Nick Sillito
Jan 1 at 16:45
Yes, I believe I've now tried every combination ofnofailandx-systemd.device-timeoutpossible.nofailmakes no difference, the decrypt still gets stuck on the drive, it just waits for the timeout and then retries with the non-existent key, putting it into timeout again. This goes on indefinitely.
– totalolage
Jan 1 at 17:01
add a comment |
I would like to set up my encrypted root partition so that it can decrypt automatically if my USB flash drive with a keyfile is present, but ask for a password otherwise. There is one thing preventing me from getting it set up though: if a password entry fails (because the USB stick isn't present) cryptsetup goes into sleep.
How can I make it abandon the attempt and move onto the next line of crypttab (which is decrypting with manual password entry) instead?
Thanks for your help!
boot usb password encryption cryptsetup
asked Jan 1 at 13:10
totalolagetotalolage
62
I would like to set up my encrypted root partition so that it can decrypt automatically if my USB flash drive with a keyfile is present, but ask for a password otherwise. There is one thing preventing me from getting it set up though: if a password entry fails (because the USB stick isn't present) cryptsetup goes into sleep.
How can I make it abandon the attempt and move onto the next line of crypttab (which is decrypting with manual password entry) instead?
Thanks for your help!
boot usb password encryption cryptsetup
boot usb password encryption cryptsetup
asked Jan 1 at 13:10
totalolagetotalolage
62
asked Jan 1 at 13:10
totalolagetotalolage
62
edited Jan 1 at 13:32
totalolage
asked Jan 1 at 13:10
totalolagetotalolage
62
asked Jan 1 at 13:10
totalolagetotalolage
62
asked Jan 1 at 13:10
totalolagetotalolage
62
62
Have you tried addingnofailas an option incrypttab(I've not tested this on my system)
– Nick Sillito
Jan 1 at 16:45
Yes, I believe I've now tried every combination ofnofailandx-systemd.device-timeoutpossible.nofailmakes no difference, the decrypt still gets stuck on the drive, it just waits for the timeout and then retries with the non-existent key, putting it into timeout again. This goes on indefinitely.
– totalolage
Jan 1 at 17:01
add a comment |
Have you tried addingnofailas an option incrypttab(I've not tested this on my system)
– Nick Sillito
Jan 1 at 16:45
Yes, I believe I've now tried every combination ofnofailandx-systemd.device-timeoutpossible.nofailmakes no difference, the decrypt still gets stuck on the drive, it just waits for the timeout and then retries with the non-existent key, putting it into timeout again. This goes on indefinitely.
– totalolage
Jan 1 at 17:01
Have you tried adding
nofail as an option in crypttab (I've not tested this on my system)– Nick Sillito
Jan 1 at 16:45
Have you tried adding
nofail as an option in crypttab (I've not tested this on my system)– Nick Sillito
Jan 1 at 16:45
Yes, I believe I've now tried every combination of
nofail and x-systemd.device-timeout possible. nofail makes no difference, the decrypt still gets stuck on the drive, it just waits for the timeout and then retries with the non-existent key, putting it into timeout again. This goes on indefinitely.– totalolage
Jan 1 at 17:01
Yes, I believe I've now tried every combination of
nofail and x-systemd.device-timeout possible. nofail makes no difference, the decrypt still gets stuck on the drive, it just waits for the timeout and then retries with the non-existent key, putting it into timeout again. This goes on indefinitely.– totalolage
Jan 1 at 17:01
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1106016%2fhow-to-make-cryptsetup-abandon-a-drive-once-password-limit-is-reached%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1106016%2fhow-to-make-cryptsetup-abandon-a-drive-once-password-limit-is-reached%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Have you tried adding
nofailas an option incrypttab(I've not tested this on my system)– Nick Sillito
Jan 1 at 16:45
Yes, I believe I've now tried every combination of
nofailandx-systemd.device-timeoutpossible.nofailmakes no difference, the decrypt still gets stuck on the drive, it just waits for the timeout and then retries with the non-existent key, putting it into timeout again. This goes on indefinitely.– totalolage
Jan 1 at 17:01