[Nix-dev] luks encrypted home stopped mounting after channel update

[Wout Mertens]

Two approaches:

   - Look through all the commits between your working system and your
   broken system, finding anything related to boot, initrd or luks
   - Mount the old and new initrds and compare contents

(I don't really know how luks works, I presume it runs in the initrd to
mount root)

On Wed, May 20, 2015 at 5:48 AM Ellis Whitehead <ellis.whitehead at gmail.com>
wrote:

> A few days ago, I ran `nixos-rebuild --switch` using the up-to-date
> unstable channel, and everything worked fine.  Last night I updated
> the channel again and rebuilt, but when I started my computer this
> morning, it doesn't prompt for the encryption password anymore, and
> home doesn't mount.  Any ideas?
>
> I can get into my system by telling GRUB to boot the previous
> configuration instead, so the partition itself is fine.  Nothing
> changed in my configure.nix.  Here are the relevant lines:
>
> ---
>     # Use the GRUB 2 boot loader.
>     boot.loader.grub.enable = true;
>     boot.loader.grub.version = 2;
>     # Define on which hard drive you want to install Grub.
>     boot.loader.grub.device = "/dev/sda";
>
>     # Encrypted home
>     boot.initrd.luks.devices = [ { device = "/dev/sda6"; name = "home"; }
> ];
>
>     fileSystems."/home".device = "/dev/mapper/home";
> ---
>
> And this is my hardware-configuration-lorax.nix:
>
> ---
> # Do not modify this file!  It was generated by ‘nixos-generate-config’
> # and may be overwritten by future invocations.  Please make changes
> # to /etc/nixos/configuration.nix instead.
> { config, pkgs, ... }:
>
> {
>   imports =
>     [ <nixpkgs/nixos/modules/installer/scan/not-detected.nix>
>     ];
>
>   boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "xhci_hcd"
> "usbhid" ];
>   boot.kernelModules = [ "kvm-intel" ];
>   boot.extraModulePackages = [ ];
>
>   fileSystems."/" =
>     { device = "/dev/sda5";
>       fsType = "ext4";
>     };
>
>   swapDevices =[ ];
>
>   nix.maxJobs = 4;
> }
> ---
>
> The error message in `journalctl -xb` is:
> May 20 04:50:55 lorax systemd[1]: Job dev-mapper-home.device/start timed
> out.
> May 20 04:50:55 lorax systemd[1]: Timed out waiting for device
> dev-mapper-home.device.
> May 20 04:50:55 lorax systemd[1]: Dependency failed for /home.
> May 20 04:50:55 lorax systemd[1]: Dependency failed for Local File Systems.
> May 20 04:50:55 lorax systemd[1]: Triggering OnFailure= dependencies
> of local-fs.target.
> May 20 04:50:55 lorax systemd[1]: Dependency failed for File System
> Check on /dev/mapper/home.
>
> The AES encryption modules is loaded, though.
>
> Any ideas about how to get the system to ask for my encryption
> password again?  Much appreciated,
> Ellis
> _______________________________________________
> nix-dev mailing list
> nix-dev at lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.science.uu.nl/pipermail/nix-dev/attachments/20150520/77ee45c5/attachment.html