Choose style:

Author Topic: [WORKAROUND-FOUND] Peppermint 7 ... full disk encryption  (Read 4712 times)

0 Members and 1 Guest are viewing this topic.

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26290
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Peppermint 7 ... Starting UP
« Reply #30 on: September 10, 2016, 05:25:21 pm »
Okey dokey, at least we seem to be getting somewhere :)

I'll experiment a little in a VM whilst you're away and if I can replicate the issue try to figure out if changing the line to just

linux   /vmlinuz-4.7.2-040702-generic root=/dev/mapper/peppermint--vg-root ro  quiet splash

or

linux   /vmlinuz-4.7.2-040702-generic root=/dev/mapper/peppermint--vg-root ro  quiet splash nomodeset

would work .. if it does, we can apply this permanently.

If not, at least we've discounted another 2 things and pretty much tied it down to a plymouth issue.
« Last Edit: September 10, 2016, 05:30:50 pm by PCNetSpec »
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Gre9J

  • nOOb
  • *
  • Posts: 20
  • Karma: 0
  • New Forum User
    • View Profile
  • Peppermint version(s): 6
Re: Peppermint 7 ... Starting UP
« Reply #31 on: September 11, 2016, 09:29:02 am »
I got back earlier than expected, read your last post and decided to try your suggestions. I think you're definitely onto something now  :)

Code: [Select]
linux   /vmlinuz-4.7.2-040702-generic root=/dev/mapper/peppermint--vg-root ro  quiet splash
... consistently takes me to the splash screen where it appears to become unresponsive BUT if I enter my encryption key and press Enter ... bingo ... it boots to the desktop like a champ! My tin-foil hat actually likes the idea of having no prompt ... something extra to wrong-foot unauthorised users  ;D


Code: [Select]
linux   /vmlinuz-4.7.2-040702-generic root=/dev/mapper/peppermint--vg-root ro  quiet splash nomodeset
... is less consistent. Sometimes it takes me to the splash screen but with a flashing cursor in the top, left-hand corner .. when I enter my key it echoes to screen but never goes any further. At other times it takes me to a blank screen where I can successfully enter my key, with no echo, and proceed to the desktop.


Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26290
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Peppermint 7 ... Starting UP
« Reply #32 on: September 11, 2016, 09:44:19 am »
Okay what happens if you go with:-

linux   /vmlinuz-4.7.2-040702-generic root=/dev/mapper/peppermint--vg-root ro  quiet splash

then when it appears to stall, you hit "Esc" or "Tab" .. can you now see the password prompt ?
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Gre9J

  • nOOb
  • *
  • Posts: 20
  • Karma: 0
  • New Forum User
    • View Profile
  • Peppermint version(s): 6
Re: Peppermint 7 ... Starting UP
« Reply #33 on: September 11, 2016, 10:08:59 am »
Hitting Esc leads me to:



... where I can enter my encryption key, echoed as *s, before arriving at the desktop.

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26290
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Peppermint 7 ... Starting UP
« Reply #34 on: September 11, 2016, 10:10:10 am »
Will this do as a solution for now, if we make it permanent ?

at least until I can find a better one ?
(that error at the top might help with this .. so that screenshot was a good idea)

As a matter of interest, what happens on other distros ? .. does it drop to the same screen or does it throw up a dialog box for key entry ?

[EDIT]

Quote
... where I can enter my encryption key, echoed as *s, before arriving at the desktop.

Have you enabled "auto login" ?
« Last Edit: September 11, 2016, 10:19:42 am by PCNetSpec »
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Gre9J

  • nOOb
  • *
  • Posts: 20
  • Karma: 0
  • New Forum User
    • View Profile
  • Peppermint version(s): 6
Re: Peppermint 7 ... Starting UP
« Reply #35 on: September 11, 2016, 10:19:31 am »
Yes, I'd be very happy with that :)

I've been trying to figure-out for myself how to make it permanent but not successful yet.

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26290
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Peppermint 7 ... Starting UP
« Reply #36 on: September 11, 2016, 10:20:53 am »
Okay gimme a short while and I'll post instructions .. meanwhile can you look at my last reply again, I've added some stuff.
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Gre9J

  • nOOb
  • *
  • Posts: 20
  • Karma: 0
  • New Forum User
    • View Profile
  • Peppermint version(s): 6
Re: Peppermint 7 ... Starting UP
« Reply #37 on: September 11, 2016, 10:51:21 am »
Upon review I thought I'd mis-read your last post :D

Really, I'd be very happy to have an encrypted installation so I can use and explore Peppermint 7 in the way I prefer. I don't care if the key prompt is visible or hidden .. as long as it behaves reasonably consistently I'm a happy-bunny.

My only other experience of encrypted Linux distros is with Peppermint 6 and that worked as I anticipated, complete with decryption prompt.

Yes, I selected auto-login during installation. My reasoning is that, with a Linux distro, a strong encryption key provides good enough protection for me. In different circumstances I might choose to add interactive login, or, take another approach entirely. I'm interested to know if you have a different view and time to post it.


Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26290
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Peppermint 7 ... Starting UP
« Reply #38 on: September 11, 2016, 11:00:30 am »
Did you have auto-login set in Peppermint 6 .. I'm just trying to figure out if that was part of the problem or not ?

My other question was - was the prompt for the decryption key in Peppermint 6 a graphical dialog box, or did it drop to a text console (like in your last image) ?



The fix for now...

Okay open a terminal and run
Code: [Select]
sudo pluma /etc/default/grub
find the line that currently reads:-
Code: [Select]
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash nomodeset"
and change it to:-
Code: [Select]
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
SAVE the file and exit pluma

back in the terminal run:
Code: [Select]
sudo pluma /etc/grub.d/10_linux
find the section (starts on line 97) that reads:-
Code: [Select]
if [ "$vt_handoff" = 1 ]; then
  for word in $GRUB_CMDLINE_LINUX_DEFAULT; do
    if [ "$word" = splash ]; then
      GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT \$vt_handoff"
    fi
  done
fi
and change it to read:-
Code: [Select]
if [ "$vt_handoff" = 1 ]; then
  for word in $GRUB_CMDLINE_LINUX_DEFAULT; do
    if [ "$word" = splash ]; then
## [BEGIN EDIT] edited by Gre9J to remove $vt_handoff parameter
##      GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT \$vt_handoff"
      GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT"
## [END EDIT] edited by Gre9J to remove $vt_handoff parameter
    fi
  done
fi
SAVE the file and exit pluma

Back in the terminal run:
Code: [Select]
sudo update-grub
and if you get no error, reboot to test.

Be Aware .. any update to grub-common will likely overwrite this edit, so make sure you remember how to manually remove the $vt_handoff parameter from the GRUB menu so you can get back in and do this again, or don't update grub.
« Last Edit: September 11, 2016, 11:03:32 am by PCNetSpec »
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Gre9J

  • nOOb
  • *
  • Posts: 20
  • Karma: 0
  • New Forum User
    • View Profile
  • Peppermint version(s): 6
Re: Peppermint 7 ... Starting UP
« Reply #39 on: September 11, 2016, 11:41:58 am »
Yes, I also had auto-login set in Peppermint 6.

Sorry, didn't appreciate your meaning .. Peppermint 6 presented a graphical dialogue for the key .. it was 'bang-smack' in the centre of the display as I remember. Definitely not a text console.

I followed your instructions and now have a reliable way of booting through encryption to the desktop. That's awesome! Another win for Peppermint.

Really appreciate your help. You and the other peeps do an amazing job in this forum and behind the scenes.

Shall I mark this [SOLVED]?

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 26290
  • Karma: 2855
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 10
Re: Peppermint 7 ... Starting UP
« Reply #40 on: September 11, 2016, 11:45:56 am »
How about you mark it (SEMI-SOLVED) or (WORKAROUND-FOUND) as it's more of a workaround than a fix at the moment.

And you're most welcome, thanks for the kind words :)

I'd also like to hear from anyone else that's using encryption, and know if they're getting the decryption key dialog box displayed correctly or not ?
(reason being Google seems to suggest this is rare and only affects **some** hardware setups with Intel graphics .. I'd like to know if this is true)
« Last Edit: September 11, 2016, 11:56:48 am by PCNetSpec »
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec