I made a full encryption setup of Ubuntu 20.04 LTS according to this article. Due to it is highly recommended to add further passphrases to avoid loosing all data due to unavailability of the initial passphrase, I did so, by adding several passphrases using
cryptsetup luksAddKey /dev/sda1 command. To be fully sure, that I have done all right, I checked for the validness of each passphrase by running
cryptsetup luksOpen --test-passphrase /dev/sda1 and all passphrases passed the test successfully.
The problem is that while booting and trying to unlock the master key (GPT) I can use only the first entered passphrase. Others are not working, while they are OK if checking it after system load by using
cryptsetup luksOpen --test-passphrase /dev/sda1.
Are there any known issues regarding this have been ever heard before or maybe there are some things that were our of my scope?
- There are no any strings within my
/etc/crypttabfile except of those, mentioned in the HOWTO article. Here they are:
LUKS_BOOT UUID=<UUID-VALUE> /etc/luks/boot_os.keyfile luks,discard
sda5_crypt UUID=<UUID-VALUE> /etc/luks/boot_os.keyfile luks,discard
- According to systemd crypttab manual, if no
key-slotoption is used, then:
The default is to try all key slots in sequential order.
But for some reason this doesn't work.