[Solved] encryption of swap with cryptsetup doesn't work

Hi,
I reinstalled my because of new hardware with EFI and GPT, and now I can't get work my swap partition encrypted.
/etc/cryptsetup:
cryptswap /dev/sda1 /dev/urandom swap
Also with more options (key-length, etc) doesn't change the behavior.
/etc/fstab:
ABEL=system / ext4 rw,relatime,data=ordered 0 1
/dev/sda128 /boot vfat rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro 0 2
/dev/mapper/cryptswap none swap sw 0 0
I tried also without any swap-entry in the /etc/fstab, because my pam_mounted LUKS-encrypted Partitions are working well, without a fstab-entry
Here is the journald-output that might be relevant:
Feb 09 01:25:41 dixi-arch systemd[1]: Found device Hitachi_HDP725025GLA380.
Feb 09 01:25:41 dixi-arch systemd[1]: Activating swap /dev/sda1...
Feb 09 01:25:41 dixi-arch systemd[1]: Starting Cryptography Setup for cryptswap...
Feb 09 01:25:41 dixi-arch kernel: tda829x 0-004b: type set to tda8290+75a
Feb 09 01:25:41 dixi-arch systemd[1]: Activated swap /dev/sda1.
Feb 09 01:25:41 dixi-arch kernel: Adding 2097148k swap on /dev/sda1. Priority:-1 extents:1 across:2097148k FS
Feb 09 01:25:42 dixi-arch kernel: device-mapper: uevent: version 1.0.3
Feb 09 01:25:42 dixi-arch kernel: device-mapper: ioctl: 4.26.0-ioctl (2013-08-15) initialised: [email protected]
Feb 09 01:25:42 dixi-arch systemd-cryptsetup[251]: Set cipher aes, mode cbc-essiv:sha256, key size 256 bits for device /dev/sda1.
Feb 09 01:25:42 dixi-arch systemd-cryptsetup[251]: Failed to activate with key file '/dev/urandom': Device or resource busy
Feb 09 01:26:16 dixi-arch systemd-cryptsetup[251]: Loading of cryptographic parameters failed: Invalid argument
Feb 09 01:26:16 dixi-arch systemd-cryptsetup[251]: Failed to activate: Invalid argument
Feb 09 01:26:16 dixi-arch systemd[1]: [email protected]: main process exited, code=exited, status=1/FAILURE
Feb 09 01:26:16 dixi-arch systemd[1]: Failed to start Cryptography Setup for cryptswap.
Feb 09 01:26:16 dixi-arch systemd[1]: Dependency failed for Encrypted Volumes.
Feb 09 01:26:16 dixi-arch systemd[1]: Dependency failed for dev-mapper-cryptswap.device.
Feb 09 01:26:16 dixi-arch systemd[1]: Dependency failed for /dev/mapper/cryptswap.
Feb 09 01:26:16 dixi-arch systemd[1]: Dependency failed for Swap.
Feb 09 01:26:16 dixi-arch systemd[1]: Unit [email protected] entered failed state.
Feb 09 01:26:16 dixi-arch systemd[1]: Starting System Initialization.
Feb 09 01:26:35 dixi-arch systemd-cryptsetup[602]: Key file /dev/urandom is world-readable. This is not a good idea!
Feb 09 01:26:35 dixi-arch systemd-cryptsetup[602]: Set cipher aes, mode cbc-essiv:sha256, key size 256 bits for device /dev/sda1.
Feb 09 01:26:35 dixi-arch systemd-cryptsetup[602]: Failed to activate with key file '/dev/urandom': Device or resource busy
During the boot sequence the PC stops working and I have to press enter to keep going. Finally i have these errors and a non-encrypted Swap-Device.
blkid:
/dev/sda1: LABEL="swap" UUID="6013541f-7809-4b5f-9702-e630e25fd144" TYPE="swap" PARTLABEL="Linux swap" PARTUUID="9849ee0b-e0d7-4d28-866c-fb7d0134a182"
/dev/sda2: LABEL="system" UUID="4bf8a95c-bf43-4980-92dd-b0eb6dc07093" TYPE="ext4" PARTLABEL="Linux filesystem" PARTUUID="6fc2bd3d-7241-4a88-8137-9985a333e3de"
/dev/sda3: UUID="445eba44-3536-4b99-a0a6-e3629cf90654" TYPE="crypto_LUKS" PARTLABEL="Linux filesystem" PARTUUID="6b84a546-9873-496c-a7e1-721824023d07"
/dev/sda4: UUID="466b5d04-7b81-4914-b5af-7e2426b801bf" TYPE="crypto_LUKS" PARTLABEL="Linux filesystem" PARTUUID="dfdf5217-7028-4a10-ae18-3a63450c3231"
/dev/sda128: UUID="9D36-7245" TYPE="vfat" PARTLABEL="EFI System" PARTUUID="9df97a9a-3f5e-487b-a3d1-60825031b537"
/dev/mapper/_dev_sda3: LABEL="dixi-home" UUID="23548045-1c6f-4640-8c62-0f3c48c05f38" TYPE="ext4"
/dev/mapper/_dev_sda4: LABEL="backup" UUID="cbed9ef3-db0b-4750-bf6c-8c42a67ad080" TYPE="ext4"
and theres is no /dev/mapper/cryptswab, what I had expexted
swapon:
NAME TYPE SIZE USED PRIO
/dev/sda1 partition 2G 0B -1
fdisk -l:
Gerät Start Ende Größe Typ
/dev/sda1 2048 4196351 2G Linux swap
/dev/sda2 4196352 109053951 50G Linux filesystem
/dev/sda3 109053952 381683711 130G Linux filesystem
/dev/sda4 381683712 486299982 49,9G Linux filesystem
/dev/sda128 486301696 488397134 1023,2M EFI System
There are some Bug-Reports for fedora, I don't understand, but maybe the problem is, that cryptsetup can't read /dev/urandom.
But this works with my old mbr-partition; therefore I hope for a configuration error
Thanks
Last edited by midixinga (2014-02-09 23:46:06)

falconindy wrote:
Looks to me like /dev/sda1 is already a swap device. Since the underlying disk is GPT formatted, systemd finds this and activates it. Your logs and swapon show exactly this.
Feb 09 01:25:41 dixi-arch systemd[1]: Activating swap /dev/sda1...
So, of course, systemd-cryptsetup is going to fail when it tries to encrypt a device which is already in use. Get rid of the swap signature on /dev/sda1.
Wow, thank you very much !
I formatted the partition /dev/sda1 with gparted as "deleted", it's now code 0700 in gdisk
fdisk -l
Disk /dev/sda: 232.9 GiB, 250059350016 bytes, 488397168 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: 27980DF8-22E1-4F25-9388-711D1EDE11A9
Device Start End Size Type
/dev/sda1 2048 4196351 2G Microsoft basic data
/dev/sda2 4196352 109053951 50G Linux filesystem
/dev/sda3 109053952 381683711 130G Linux filesystem
/dev/sda4 381683712 486299982 49.9G Linux filesystem
/dev/sda128 486301696 488397134 1023.2M EFI System
Disk /dev/mapper/cryptswap: 2 GiB, 2147483648 bytes, 4194304 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
swapon -s
Filename Type Size Used Priority
/dev/dm-0 partition 2097148 0 -1
journalctl:
Feb 09 16:54:09 dixi-arch systemd[1]: Starting Cryptography Setup for cryptswap...
Feb 09 16:54:09 dixi-arch systemd-cryptsetup[271]: Key file /dev/urandom is world-readable. This is not a good idea!
Feb 09 16:54:09 dixi-arch systemd-cryptsetup[271]: Set cipher aes, mode cbc-essiv:sha256, key size 256 bits for device /dev/sda1.
Feb 09 16:54:10 dixi-arch systemd[1]: Started Cryptography Setup for cryptswap.
Feb 09 16:54:10 dixi-arch systemd[1]: Starting Encrypted Volumes.
Feb 09 16:54:10 dixi-arch systemd[1]: Reached target Encrypted Volumes.
Feb 09 16:54:10 dixi-arch systemd[1]: Found device /dev/mapper/cryptswap.
Feb 09 16:54:10 dixi-arch systemd[1]: Activating swap /dev/mapper/cryptswap...
Feb 09 16:54:10 dixi-arch systemd[1]: Activated swap /dev/mapper/cryptswap.
Feb 09 16:54:10 dixi-arch systemd[1]: Starting Swap.
Feb 09 16:54:10 dixi-arch systemd[1]: Reached target Swap.
I think everything is fine now
Thanks again

Similar Messages

[SOLVED] Xorg and mouse with HAL doesn't work

Hi
I recently reinstalled Arch Linux and I have some problems... My mouse isn't working - at all! I'm using an HP Compaq 6510b.
I've installed the following packages:
* xf86-input-evdev
* hal
* dbus
I don't have an xorg.conf file at all, as I heard that hal should solve everything automagically for me. This seems to not be the case?
Any ideas? Thanks
Last edited by skorpan (2009-06-05 18:41:51)

Yeah, I'm doing that!
BTW, Xorg.0.log is here: http://dpaste.com/51933
Last edited by skorpan (2009-06-05 17:58:31)

Cropping pictures with Viewer doesn't work.

Cropping pictures with Viewer doesn't work.
Selecting < or ~ 12 pictures. (picture size are Snapshots with iphone resolution) ->Viewers opens and display them. -> Russian roullette between cmd+k or the little crop button. No indication which one will process a crop or which not. -> Both result in picture selection disappear with no crop.
Selecting > 12 pictures. (picture size are Snapshots with iphone resolution) -> Viewer opens and display them. I crop them one by one with same Russian roulllette behavior between cmd+k or the little crop button. -> Closing Viewer. -> Pictures remain like they've been before. Not cropped.

I just tried what you described (although I can't really fathom why you would describe it as Russian roulette (with a variable number of L's). Unless you've been drinking a lot, which is what people are usually doing when they are playing Russian roulette. Your post was hard enough to decipher without that.
Anyway, my cropping was saved each time. I think there's something wrong with your Preview.app. Have you changed anything about the autosave functions of OSX?
I would try:
Boot into your recovery partition (restart, hold down ⌘R until you see the Apple logo), and use Disk Utility to repair your hard drive. Repair permissions too while you're there. OS X: About OS X Recovery
if that doesn't help, then I'd reinstall Mavericks over your current installation.

[SOLVED]Something wrong with Locale, "ÅÖÄ" doesn't work in terminal.

If you have this kind of problem stated above in the title, or similar, here is what I did...
Make sure you have correct locale, you'll need a UTF-8 one.
As stated in the install guide(or beginner's guide iirc) do the following:
Uncomment one of the locales in "/etc/locale.gen", it doesn't have to be language pacific if you're only after using UTF-8 which provides more characters than normal ASCII.
then run "locale-gen". Make sure to set your "/etc/locale.conf" to "LANG=en_US-UTF8" of course you can choose whatever locale you want not just "en_US-UTF-8". After that make sure to reboot, it may also work with just log-out and log-in again, but I did not reboot and neither log-out and when back in. If it still doesn't work, run "locale" and "locale-a" if the output is "C" in each column just redo what I stated above, if it still not work, then you have to consult the manual, wiki and if you don't find the problem use a search-engine and if you still don't find answer here on the forums, the people here is really helpful!
Last edited by kalle97 (2012-10-01 17:46:16)

" Okey I uncommented sv_SE.utf8 in /etc/locale.gen ...
You're supposed to uncomment "sv_SV.UTF-8 UTF-8", then run locale-gen (with sudo), not "sv_SE.utf8".
That's what I did.
https://wiki.archlinux.org/index.php/Be … ide#Locale
^ Except that you shouldn't use "echo" in this case. That command works well when you're logged in as root, but for sudo, not so much. Check the file with nano and you'll see that nothing changed. For sudo, use tee.
$ sudo tee /etc/locale.conf <<< "LANG=en_US.UTF-8"
Note: You don't necessarily need "sv_SV" for those characters to show up. Setting a "sv_SV" locale would make programs show up in Swedish instead of English - unless that's what you want. UTF-8 locales will cover those characters just fine (provided that the font from the terminal actually contains those glyphs, of course).
So you mean I can have en_US.UTF8 as locale but still write swedish letters? So the problem is with the font or somthing, not the locale?
If you still have problems, post the output of:
$ ls -l /etc/profile.d/locale.sh
$ curl sprunge.us -F sprunge=@/etc/locale.gen
$ curl sprunge.us -F sprunge=@/etc/locale.conf
$ locale -a
$ locale
Well, I did as the guide told about locale.conf, it doesn't seem to work, even if "locale" outputs correct info now, but I'll try with restarting the X server too, just in case.....

Webutil: webutil_file.file_open_dialog with filter doesn't work as expected

Hi
I just tried to open files by using webutil_file.file_open_dialog. Since I only want to select files with the prefix "brp" (e.g. brp0001.txt, brp0002.lis), I fill the parameter file_filter with the value: brp*.*
This doesn't work. The dialog only shows folders, but not the brp*.* files. I tried with switching to capitals, which doesn't solve anything. With the filter set to *.* the dialog shows all folders and files, so that seems to work ok.
Is anyone aware of this problem and know a solution? I'm using webutil 1.0.2 (beta).

K..here's some logging. As far as I can see it's all normal, but it doesn't work (no matter if I use a last | or not). Should be easy to reproduce.
2003-okt-29 09:42:44.547 WUF[setProperty()] Setting property WUF_GFN_DIRNAME to y:\data\
2003-okt-29 09:42:44.567 WUF[setProperty()] Setting property WUF_FILENAME to false
2003-okt-29 09:42:44.567 WUF[setProperty()] Setting property WUF_FILTER to (brp_archief*.*)|brp_archief*.*
2003-okt-29 09:42:44.587 WUF[setProperty()] Setting property WUF_GFN_MESSAGE to bestandsnaam selecteren
2003-okt-29 09:42:44.597 WUF[setProperty()] Setting property WUF_GFN_MULTISELECT to FALSE
2003-okt-29 09:42:44.608 WUF[getProperty()] Getting property WUF_GFN_OPENFILE
2003-okt-29 09:42:45.679 WUF[gfnDialog()] Creating Custom File Filter : Mask=brp_archief*.*, Label=(brp_archief*.*)
2003-okt-29 09:42:45.679 WUF[gfnDialog()] Open File mode
2003-okt-29 09:45:27.203 WUF[getProperty()] Value of WUF_GFN_OPENFILE=

Printing PDDoc with AFExecuteThisScript() doesn't work after an upgrade from SDK 5 to SDK8

Hello,
I have made an upgrade of my plug-in which was developed with the Acrobat 5 SDK. I upgrade it to Acrobat 8 SDK and my print function doesn't work anymore.
Actually I print my document using a javascript trusted function instead the function provided by the C++ library for internal reason.
Here below is the code used to print my document :
char szJavaPrint[6000];
sprintf(szJavaPrint,
"pp = this.getPrintParams(); \r\n"
// fill pp with parameters
"pp.interactive = pp.constants.interactionLevel.silent; \r\n"
"\r\n"
"this.trustedPrint(this, pp);"
PDDoc pdDoc = AVDocGetPDDoc(avDoc);
AFExecuteThisScript(pdDoc, szJavaPrint, NULL);
It was working with the Acrobat 5 SDK but the print seems to have no effect using the Acrobat 8 SDK. I know that there is a change between Acrobat 5 and 8 concerning the Character Set (currently I set the Character Set to "Not Set" in the Configuration Properties of the project) but I don't think that my problem comes from the Character Set.
All ideas to resolve this problem are welcome.
Kind regards,
Joe

See what happens if you remove the "setting of interactive to silent"...
There is a restriction on silent printing in Acrobat, but I would not have expected that to be passed into this method - but it could have been overlooked and be a bug.
Also, I don't recall a trustedPrint() method in Acrobat JS - check the documentation for the correct name of this function...

After upgrade to IOS 8.3 sync with iTunes doesn't work

After upgrade iPhone 6, iPad Air to IOS 8.3, the sync (over wifi, as well) to iTunes doesn't work anymore.
On iMAC iTunes, the last sync's hour and day appear different from what is recorded on mobile devices (iPhone and iPad); with IOS 8.2 and the previous iTunes' version the sync worked correctly: the dates are the same only for few seconds after syncronization, then the IOS devices show the syncronization's dates related to two weeks ago.
Thanks

you'll need to contact your carrier.

[SOLVED]mounting cdrom and usb devices doesn't work

Hello,
i have trouble mounting my usb devices. automount doesn't work and i can't mount them manually even as a superuser. here's the output of mount command:
mount: wrong fs type, bad option, bad superblock on /dev/sdc,
missing codepage or helper program, or other error
In some cases useful info is found in syslog - try
dmesg | tail or so
i can mount cdrom manually but i can't do the same for my usb stick and external hard drives. it always complains about the above regardless of the filesystem. my devices are working under windows and other linuxes so i know hardware is not the problem.
i'm using lxde with pcmanfm.
if you need any other files just ask.
thanks
Last edited by the gray (2009-03-16 20:15:18)

above was the error when i tried to mount any usb device with "mount -t <type> /dev/sdc /media/mountpoint". and i couldn't mount any usb device as root from console. when i tried to mount devices using pcmanfm it just popped some empty dialogs and i couldn't find any mention of "IsCallerPriviliged failed" error so i (wrongly) presumed it wasn't that. i did try some of the other fixes mentioned in the forum with no success. but adding exec ck-launch-session startkde to my .xinitrc fixed the issue
thanks again
Last edited by the gray (2009-03-16 20:17:53)

Fit the window with mouse doesn't work after new update 10.9.2

Hi, I could fit a windows using my mouse wheel or two finger(on trackpad), doesn't work after I set up new Mavericks update(10.9.2) I'm using Haswell rMBP. Can anyone help me please? Thanks a lot. (Also, minimize with mouse wheel doesn't work too.)

Doesn't anyone having this issue?

Synchronization of tasks and interaction logs with Outlook doesn't work

Dear SAP Experts,
I'm workink on CRM 7.0 (release 7.7.06.010).
We are trying to make the synchronization of activities, contacts and tasks from our CRM system to Microsoft Outlook.
It's working fine for the contacts and for the Apointment BP visit (transaction type Y020).
But no synchronization made for others activities (interaction log Y007 and telephone calls PCAL) or BP Tasks (Y030) we created in the system.
We just applied today SAP Note 1415263 and Groupware Integration 3.057.
I made the settings in the CRM Calendar tab in Outlook (with synchronization from CRM to Outlook), and checked apointment, contacts and tasks.
In customizing (CRM > Transactions > Basic settings > Define transaction types), I flagged for the following transaction types the little 'Calendar' box: Y020, Y030, Y007 and PCAL.
In another entry (CRM > CRM Middleware and related components > Settings for client-based synchronization), I indicated the transaction type Y020 for DEFAULT_APPT_PROC_TYPE and Y030 for DEFAULT_TASK_PROC_TYPE.
Any idea about what is missing or not already done?
Any help will be apppreciated.
Thanks in advance for your help,
Kind regards,
Grégory KREMSER
Edited by: Grégory Kremser on Feb 3, 2010 3:13 PM

We don't have a CAS array set up. We want the fail over to be fully manual and only fail over to another server when mb1 is in a completely failed state and won't be back up and running withing a set time frame. We can get everything working
on MB3 and only Outlook doesn't work when everything is on MB2. Outlook also doesn't work if databases are on another server and DNS is pointing Outlook to MB2 (again MB3 works fine).

Powerdns with MySQL doesn't work

I recently switched from ubuntu to Arch and I love it. However I have problems with PowerDNS running with MySQL database. When I set pdns.conf to
launch=gmysql
gmysql-host=127.0.0.1
gmysql-user=user
gmysql-password=pass
gmysql-dbname=database_name
and restart pdns i get this error:
Oct 22 22:43:34 Archlinux pdns[3337]: Caught an exception instantiating a backend, cleaning up
Oct 22 22:43:34 Archlinux pdns[3337]: gmysql Connection failed: Unable to connect to database: Lost connection to MySQL server at 'reading initial communication packet', system error: 0
Socket connection doesn't work either.
If someone could help me out of this I would be very happy.
Best regards!
Jernej

It works! Thank you! Thank you! Thank you!
I wasted so many hours combating this...
I owe you a beer byte! Thx again!

'Alt' with + or - doesn't work

The adjustment increment of several of the sliders is supposed to be reduced by holding the Alt key down while the + or - key. This doesn't work on my system. I've tried tested both Alt keys with both + and - keys on my keyboard. No luck. All I get is the Windows error tone. Using the Shift key to increase the adjustment increment works as it should. Any ideas out there? TIA, njb

I consider it's working OK on Windows
But it's platform dependent !
To resume :
Windows + and - give small increments , shift and + and - give big increments
Mac + and - give big increments , alt and + and - give small increments.
And the Martin Evenings book is the best LR book for me, though here he's may be not clear enough.

RowBanding with BC4J doesn't work

I want to use rowBanding in a table with a viewObject as its source.
It doesn't work.
Could anybody help me?
TIA
Francisco Bosch

Francisco:
Could you tell me what you mean by "rowBanding?" Are you referring to Swing (JClient) client or HTML client?
Thanks.
Sung

GoToAndStop or Play on Frame Label with Video doesn't work?

I have a video in a frame that corresponds with the label "eight". i have a button on the timeline with the following code. i've tried it both gotoAndStop and gotoAndPlay and it doesn't work. thanks in advance for your suggestions.
on (press) {
gotoAndStop(eight);

use:
on (press) {
gotoAndStop("eight");

Linked column with # sign doesn't work in report results

I have a 2 page query situation, whereas in the 1st page I have a wildcard query to find a product number.
This product number is set-up as link to run a report which opens in another page.
(Type is a STRING.)
Everything works fine unless the product number starts with the # sign.
I can run a report using this in a non-linked page, but it doesn't work in the linked page...?
Simple queries
Page 1
select
from
Products
WHERE (((upper(TOP_ITEM) like upper(:P1_SEARCH)||'%')))
and :P1_SEARCH is not null
(Link on Top Item - :P2_Search)
Page 2
select
from
Products
where Top_Item = :P2_Search
(This works fine if I enter the #[Product] into the text field)
Link doesn't work...?

You need to escape the "#" character in the product no and generate the link's HTML code in report #1 directly within the SQL query.
select ..
,'<a href="f?p=REPLACE(product_number,'#',''%23)
,'<a href="f?p=' || :APP_ID || ':200:' || :APP_SESSION || '::NO::P200_PRODUCT_NUMBER:' || REPLACE(product_number,'#','%23') || '"> Link</a>' product_number_link
FROM ..
{code}
<i> 200 is report #2's page
P200_PRODUCT_NUMBER is report #2's page item which is set on redirecting to that page.
Product_number is the column name of column with '#' characters
Change display type of product_number_link column to "standard report type"</i>

[Solved] encryption of swap with cryptsetup doesn't work

Similar Messages

Maybe you are looking for