I just installed a Debian 13 Trixie system on my laptop. I have 5 GPT partitions on 1 terabyte SSD and NO LVM!

partition layout
sda1 vfat 256M   EFI system partition
sda2 ext4 512M   boot partition
sda3 LUKS 460G   encrypted root
--   sda3_crypt  root partition, unlocks with passphrase
sda4 LUKS 465G   encrypted home
--   sda4_crypt  home partition, unlocks with passphrase
sda5 LUKS 4G     encrypted swap
--   sda5_crypt  swap partition, unlocks with keyfile

GRUB works fine, it loads the kernel, then I enter the password to decrypt my root partition. It decrypts correctly, then hangs for 1 minute 30 seconds.

After that, I get this error:

[ TIME ] Timed out waiting for device dev-mapper-sda4_crypt.device - /dev/mapper/sda4_crypt.
[DEPEND] Dependency failed for home.mount - /home/
[DEPEND] Dependency failed for local-fs.target - Local File Systems.
[DEPEND] Dependency failed for systemd-fsck@dev-mapper-sda4_crypt.service - File System Check on /dev/mapper/sda4_crypt.
[ TIME ] Timed out waiting for device dev-mapper-sda5_crypt.device - /dev/mapper/sda5_crypt.
[DEPEND] Dependency failed for dev-mapper-sda5_crypt.swap - /dev/mapper/sda5_crypt.
[DEPEND] Dependency failed for swap.target - Swaps

Not once does it ask me for the password to decrypt my home partition, it just waits until it fails.

  • bijectivehomomorphism
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    7 hours ago

    Have you set up your /etc/crypttab to unlock your partitions after unlocking the root partition? I haven’t had a setup where I needed to use multiple passphrases for unlocking so I’ll leave that part for someone else (if it’s even possible, you might have to use a custom encrypt hook?). But otherwise, see this for your keyfile partitions: https://wiki.archlinux.org/title/Dm-crypt/System_configuration#crypttab

    Maybe also take a look at the LUKS on LVM section on the Arch wiki for potentially a little more guidance. Just ignore all the LVM instructions of course, they might as well be separate partitions

    EDIT: I just noticed you’re wanting to encrypt swap, which could be a headache depending on your needs (e.g. do you need hibernation?). See more here: https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption

    NOTE: I’ve provided links to the Arch wiki, but should be largely applicable to your set up