Ubuntu
ecryptfs-utils package

  1. Trusty (14.04)
  2. Bug #953875
  3. Comment #43

Comment 43 for bug 953875

Revision history for this message
sudodus (nio-wiklund) wrote :

The following instructions from the release message *did not work for me* when testing Lubuntu Vivid. See also

http://ubuntuforums.org/showthread.php?t=2266912

Is this bugfix only avoiding 90 seconds waiting time when upgrading, or should it be possible to use 'Encrypted home' with cryptswap in new installations? (The option is still there in the installer.)

---
** Branch linked: lp:~ubuntu-branches/ubuntu/vivid/ecryptfs-utils/vivid-proposed

-- You received this bug notification because you are subscribed to the bug report.
https://bugs.launchpad.net/bugs/953875

Title: Encrypted swap no longer mounted at bootup Status in eCryptfs: Fix Released

Status in ecryptfs-utils package in Ubuntu: Fix Committed

Status in ecryptfs-utils source package in Vivid: Fix Committed

Bug description: SUMMARY
=======
During installation with "encrypt my home folder" mode, a broken /etc/crypttab gets created which defines a non-existing swap device (usually "cryptswap1") with a UUID. This will also be put into /etc/fstab. As after installation the UUID does not exist, such systems don't have any actual swap.

UPGRADE FIX
===========
An upgrade to Ubuntu 15.04 ("vivid") will detect and comment out these broken swap devices from /etc/fstab and /etc/crypttab. If you actually want to use those, do these steps:

- Find the swap device that was meant to be used in "sudo fdisk -l" (it should say "Linux swap" in the last column), remember the device name (something like "/dev/sda5")

- Find the UUID in /etc/crypttab (the long alphanumeric ID after UUID=)

- Run "sudo mkswap -U 1234... /dev/sda5", replacing "1234" with the above UUID, and /dev/sda5 with the device name from step 1.

- Edit /etc/crypttab to append ",offset=1024" in the fourth (last) column of the cryptswap1 line; ensure that there is *no space* between the "cipher=aes-cbc-essiv:sha256" and the appended option. If there is a leading "#" in the file, remove that too.

- If there is a leading "#" in /etc/fstab in the line starting with /dev/mapper/cryptswap1 line, remove that.

- Run "sudo update-initramfs -u".
---