[oS-EN] Machine for disk encryption password happens too fast.
Hi, New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap). On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu. I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work. Question: Is it possible to insert a delay? -- Cheers / Saludos, Carlos E. R. (from Telcontar, using openSUSE Leap 15.4)
On 2023-03-29 21:11, Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay? Once upon a time there was "boot delay" but it was removed when people complained about slow startup. At least on my latest Lenovo X1.
The following is pure guesswork and not something I've tried: It may be possible to delay the startup by telling setup->startup to change from quick to diagnostic. You can also try to change the starting order so that you have something before your normal starting order. Maybe something jurassic like a CD? -- /bengan
On 2023-03-30 08:40, Bengt Gördén wrote:
On 2023-03-29 21:11, Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay? Once upon a time there was "boot delay" but it was removed when people complained about slow startup. At least on my latest Lenovo X1.
The following is pure guesswork and not something I've tried: It may be possible to delay the startup by telling setup->startup to change from quick to diagnostic. You can also try to change the starting order so that you have something before your normal starting order. Maybe something jurassic like a CD?
LOL, this brand new laptop doesn't have a CD reader :-D I can try "diagnostic" or whatever it is called, yes. I saw the entry. I think the code that runs this fast is in /boot/efi/EFI/, some of those files. I was hoping someone knows how to configure that. On another machine I see a text file: /boot/efi/EFI/main-os/grub.cfg search --fs-uuid --set=root 0d457df1-b43d-... set prefix=(${root})/boot/grub2 source "${prefix}/grub.cfg" On the new laptop it is: Laicolasse:~ # cat /boot/efi/EFI/opensuse/grub.cfg cryptomount -u 43662ac8... search --fs-uuid --set=root 858cc569-... set prefix=(${root})/boot/grub2 source "${prefix}/grub.cfg" Laicolasse:~ # Where would that be documented...? :-? (just found out that the string after "cryptomount" is the uuid of the encrypted root, without the dashes; the one after "--set=root" is same partition, decrypted. Not important in this thread, but writing it down before I forget) -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay?
Many BIOS'es allow you to enable "slow" POST, e.g. with full memory check and a summary display before booting. Some also have an option to always stop after POST. Even in "quick" mode, you have to be able to enter the BIOS setup and/or choose your boot medium. -- Per Jessen, Zürich (15.5°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes
On 2023-03-30 10:15, Per Jessen wrote:
Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay?
Many BIOS'es allow you to enable "slow" POST, e.g. with full memory check and a summary display before booting. Some also have an option to always stop after POST. Even in "quick" mode, you have to be able to enter the BIOS setup and/or choose your boot medium.
Before I installed, the process went more leisurely. I had time enough while it looked at the USB install system. Once installed with encryption, the prompt for the password happens way too fast. The thing is, the machine does its "boot things", takes several seconds, ignores keypresses, then says "press f1 for setup", and half a second later that goes out and prompts for the password. That's the interval where the F1 key is accepted. Half a second. Then it expects the password and keyboard does not any longer reads F1, not even ctrl-alt-supr. This is grub code, not firmware code. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
Carlos E. R. wrote:
On 2023-03-30 10:15, Per Jessen wrote:
Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay?
Many BIOS'es allow you to enable "slow" POST, e.g. with full memory check and a summary display before booting. Some also have an option to always stop after POST. Even in "quick" mode, you have to be able to enter the BIOS setup and/or choose your boot medium.
Before I installed, the process went more leisurely. I had time enough while it looked at the USB install system.
Once installed with encryption, the prompt for the password happens way too fast. The thing is, the machine does its "boot things", takes several seconds, ignores keypresses, then says "press f1 for setup", and half a second later that goes out and prompts for the password. That's the interval where the F1 key is accepted. Half a second.
In my experience, interrupting the process with F1/F2/Enter/Delete/F8/F12/F10 is also accepted before that minimal pause. You have to be able to access the BIOS settings or change the boot medium.
Then it expects the password and keyboard does not any longer reads F1, not even ctrl-alt-supr.
Well, by that time the machine is booting, too late for any BIOS intervention. -- Per Jessen, Zürich (16.7°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes
On 2023-03-30 10:56, Per Jessen wrote:
Carlos E. R. wrote:
On 2023-03-30 10:15, Per Jessen wrote:
Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay?
Many BIOS'es allow you to enable "slow" POST, e.g. with full memory check and a summary display before booting. Some also have an option to always stop after POST. Even in "quick" mode, you have to be able to enter the BIOS setup and/or choose your boot medium.
Before I installed, the process went more leisurely. I had time enough while it looked at the USB install system.
Once installed with encryption, the prompt for the password happens way too fast. The thing is, the machine does its "boot things", takes several seconds, ignores keypresses, then says "press f1 for setup", and half a second later that goes out and prompts for the password. That's the interval where the F1 key is accepted. Half a second.
In my experience, interrupting the process with F1/F2/Enter/Delete/F8/F12/F10 is also accepted before that minimal pause.
Not in my machine. I tried.
You have to be able to access the BIOS settings or change the boot medium.
Yes, the trick in my machine is to tap the key hundreds of times since the led light goes up till it responds.
Then it expects the password and keyboard does not any longer reads F1, not even ctrl-alt-supr.
Well, by that time the machine is booting, too late for any BIOS intervention.
I think this is a bug in the grub code used when the disk is encrypted. I will create a bugzilla. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
Carlos E. R. wrote:
On 2023-03-30 10:56, Per Jessen wrote:
Carlos E. R. wrote:
On 2023-03-30 10:15, Per Jessen wrote:
Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay?
Many BIOS'es allow you to enable "slow" POST, e.g. with full memory check and a summary display before booting. Some also have an option to always stop after POST. Even in "quick" mode, you have to be able to enter the BIOS setup and/or choose your boot medium.
Before I installed, the process went more leisurely. I had time enough while it looked at the USB install system.
Once installed with encryption, the prompt for the password happens way too fast. The thing is, the machine does its "boot things", takes several seconds, ignores keypresses, then says "press f1 for setup", and half a second later that goes out and prompts for the password. That's the interval where the F1 key is accepted. Half a second.
In my experience, interrupting the process with F1/F2/Enter/Delete/F8/F12/F10 is also accepted before that minimal pause.
Not in my machine. I tried.
You have to be able to access the BIOS settings or change the boot medium.
Yes, the trick in my machine is to tap the key hundreds of times since the led light goes up till it responds.
Well, so it _does_ work on your machine too :-) You're lucky you even get to see the logo - that is also disabled on many machines. -- Per Jessen, Zürich (16.6°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes
On 2023-03-30 11:04, Per Jessen wrote:
Carlos E. R. wrote:
On 2023-03-30 10:56, Per Jessen wrote:
Carlos E. R. wrote:
On 2023-03-30 10:15, Per Jessen wrote:
Carlos E. R. wrote:
Hi,
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap).
On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
I have to press and hold the power button for 4 seconds to power off, then power up again, and start pressing F1 or F12 fast, so that it is read. Slow pressing doesn't work. Press F1 and hold doesn't work.
Question: Is it possible to insert a delay?
Many BIOS'es allow you to enable "slow" POST, e.g. with full memory check and a summary display before booting. Some also have an option to always stop after POST. Even in "quick" mode, you have to be able to enter the BIOS setup and/or choose your boot medium.
Before I installed, the process went more leisurely. I had time enough while it looked at the USB install system.
Once installed with encryption, the prompt for the password happens way too fast. The thing is, the machine does its "boot things", takes several seconds, ignores keypresses, then says "press f1 for setup", and half a second later that goes out and prompts for the password. That's the interval where the F1 key is accepted. Half a second.
In my experience, interrupting the process with F1/F2/Enter/Delete/F8/F12/F10 is also accepted before that minimal pause.
Not in my machine. I tried.
You have to be able to access the BIOS settings or change the boot medium.
Yes, the trick in my machine is to tap the key hundreds of times since the led light goes up till it responds.
Well, so it _does_ work on your machine too :-) You're lucky you even get to see the logo - that is also disabled on many machines.
The "Lenovo" logo remains beneath the grub menu when plymouth is used, while the kernel boots, all the time till the second password prompt. Then it comes back, I think. It can last for half a minute. Before I installed, I had several seconds to tap the key, before grub printed the menu. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
On 2023-03-30 11:00, Carlos E. R. wrote:
On 2023-03-30 10:56, Per Jessen wrote:
Carlos E. R. wrote:
...
I think this is a bug in the grub code used when the disk is encrypted. I will create a bugzilla.
Bug 1209981 - Grub prompts for disk encryption password too fast -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
Carlos E. R. wrote:
On 2023-03-30 11:00, Carlos E. R. wrote:
On 2023-03-30 10:56, Per Jessen wrote:
Carlos E. R. wrote:
...
I think this is a bug in the grub code used when the disk is encrypted. I will create a bugzilla.
Bug 1209981 - Grub prompts for disk encryption password too fast
Without having read the report, the title alone made me chuckle: "this software is too fast for me". :-) -- Per Jessen, Zürich (14.2°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes
On Wed, Mar 29, 2023 at 9:11 PM Carlos E. R.
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap). On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
dunno about your machine exactly but when searching google for lenovo L14 bios key there are endless articles about all kinds of lenovo machines and ways to enter the bios or uefi, and an article comes up for a gen 2 of that L14 but also with additional machine type model numbers or something. anyhow those articles mostly say, try the ENTER and or F1 key quickly during POST of bios/uefi. once you are past the bios or uefi stage there is no way to enter into bios uefi any more thats my knowledge at least. i have seen all kinds of other vendors that need happily tapping keys such as TAB, F1, F2, F9 or F10 F11 and so on mostly, but some react to ESC (hewlett packard) and so forth. sometimes its alsi futile to hopple on the keys like a madman, so its just a pain. as others have stated, try to add boot delay or similar functions called in your bios uefi settings etc. good luck
On 2023-03-30 15:28, cagsm wrote:
On Wed, Mar 29, 2023 at 9:11 PM Carlos E. R. <> wrote:
New machine (Lenovo L14 Gen3). Full disk encryption using discrete partitions with the same password ("/", "/home", swap). On boot, the Lenovo logo flashes instantly and the prompt for the disk encryption key pops fast. At this point, ctr-alt-del is ignored. There is no time nor message to press F1 for bios config or F12 for boot menu.
dunno about your machine exactly but when searching google for lenovo L14 bios key there are endless articles about all kinds of lenovo machines and ways to enter the bios or uefi, and an article comes up for a gen 2 of that L14 but also with additional machine type model numbers or something.
anyhow those articles mostly say, try the ENTER and or F1 key quickly during POST of bios/uefi.
That's not the problem, I know very well what keys produce the machine config screen or boot media menu. I'm not asking about that. I'm asking about how to tell the opensuse code that is loaded from /boot/efi/ to wait a bit before prompting for the disk password, or to pass keys to the firmware. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
participants (4)
-
Bengt Gördén -
cagsm -
Carlos E. R. -
Per Jessen