Bug ID | 1200252 |
---|---|
Summary | grub2 2.06 - full disk encryption (FDE): extremely slow load of boot partition |
Classification | openSUSE |
Product | openSUSE Distribution |
Version | Leap 15.4 |
Hardware | 64bit |
OS | openSUSE Leap 15.4 |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Bootloader |
Assignee | screening-team-bugs@suse.de |
Reporter | andihartmann@freenet.de |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
After applying FDE on the system, it takes very long until grub opens the (small) boot partition on a nvme disk. Reason is most probably how grub handles the necessary hashing of passwords (https://linux-blog.anracom.com/2018/11/30/full-encryption-with-luks-sha512-aes-xts-plain64-grub2-really-slow/#more-8488 - see Conclusion 2). Example: # df -h /boot/ Filesystem Size Used Avail Use% Mounted on /dev/mapper/boot_crypt 233M 120M 109M 53% /boot cryptsetup luksDump /dev/nvme0n1p1 ... Key Slot 0: ENABLED Iterations: 3628290 ... Key Slot 1: ENABLED Iterations: 3634578 I would appreciate, if this rather high delay (even on a Ryzen 7 1700X CPU) could be seriously reduced - the kernel loads this (and many more) partition quite imperceptible.