[Software] Luks suddenly not requiring passphrase

[rovernut]

I've been using luks with a passphrase for years, but sometime in the past months, since installing bullseye, it started using a keyfile for my home partition.
I get prompted for the passphrases for /, and swap, but not home.
First, I have no idea how this happened, or how it's even possible.
But mainly I'm looking for the steps to get rid of the keyfile and revert to a passphrase for my home partition.
I've been searching, but haven't found any clear instructions.

Regards,
Tom

[kent_dorfman766]

I cannot remember the filename but under the root (probly /etc directory) will exist a keys file/directory. back it up...and delete it...then expect that you may or may not be presented with the opportunity to enter your key for /home upon bootup...will depend upon your specific config

[rovernut]

Did you happen to remember the path and filename? I couldn't find it and never got back here.

I just installed I just installed bookworm on one of my laptops and was VERY careful to set encryption on all 3 drives (root, swap, home) to a passphrase (I used the same passphrase for all three in case that affects behavior) and was prompted 6 times for the passphrase (enter and confirm), but when it boots it only asks for the passphrase for root and swap. Once swap is confirmed, it finishes booting.
I still can't find the keyfile.

Regards,
Tom

[Aki]

Hello,

I just installed I just installed bookworm on one of my laptops and was VERY careful to set encryption on all 3 drives (root, swap, home) to a passphrase (I used the same passphrase for all three in case that affects behavior) and was prompted 6 times for the passphrase (enter and confirm), but when it boots it only asks for the passphrase for root and swap. Once swap is confirmed, it finishes booting.

Is it used the same pass-phrase for all encrypted partitions ?

Can you report a full copy of the system log ? You can use the command:

Code: Select all

script log.txt
journalctl -b --no-pager 
exit

The log will be in the file named log.txt

You can report logs in one of the following ways:

• paste them into the Debian Pastezone service (https://paste.debian.net) and report the URL/link of the paste in a follow-up message

• attaching the logs to a follow-up forum message as a compressed zip or gz file

• paste logs into the body of a follow-up message between code tags (if they fit the size of a forum message)

[rovernut]

Hello,
Is it used the same pass-phrase for all encrypted partitions ?

Yes. it's a 29 character passphrase, I only want to remember one.

Can you report a full copy of the system log ?

Are there particular strings you're interested in? I'm not crazy about posting the fully log unless I absolutely need to.

regards,
Tom