On 14.06.2024 18:05, Adam Mizerski via openSUSE Users wrote:
W dniu 14.06.2024 o 16:41, Daniel Bauer pisze:
Hello,
So I intstalled OS 15.5 on a lenovo Laptop with a normal /boot/efi and an encrypted LVM including partitions /, /home and /swap
Now when I start the laptop I am asked twice for the password, where the first one takes 1 Minute (!) until the Grub-Menu appears and then asks it a second time...
Something is wrong. But what?
I appears the Logo of Lenovo in the middle of the screen and in the left upper corner:
Welcome to GRUB! Enter passphrase for hd0, gpt2 (long number):
I enter the passphrase (there is no feedback, the cursor doesn't move) After htting enter, it says "Attempting to decrypt master key"
This takes a full minute. Then the usual Opensuse Grub Menu appears, I chose to start OS 15.5 and again am asked
Please enter passphrase for disk NAME (cr_...part..):
(This is the kind of prompt I am used to, it has feedback for characters entered (*) and immediately after hitting enter the boot process starts.)
- What is that first passphrase question for? - Why does it appear? (I have never seen that and have installed don't know how many PC's and Laptops) - How can I can get rid of it?
Thanks for your help!
Daniel
Everything seems correct.
GRUB needs password to read files and config from disk. It has no direct way of passing the password to the kernel, so kernel asks for it again.
It has and it does. It applies to the device where /boot/grub is located. As we have no idea how many encrypted devices OP has we have no way to guess whether it is a bug or a normal behavior.
There is a solution: https://en.opensuse.org/SDB:Encrypted_root_file_system
Yes, for any other device than the one needed by grub you will need to do it.
Also, the waiting for GRUB menu comes from non-optimized cryptography implementation (I think there are some technical limitations). See https://wiki.archlinux.org/title/GRUB/Tips_and_tricks#Speeding_up_LUKS_decry...