Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

luks install: detailed instructions for using PARTUUID instead of device path #31

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

luks install: detailed instructions for using PARTUUID instead of device path #31

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 13 additions & 6 deletions _docs/installation/partitioning/encrypted.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -215,15 +215,22 @@ and wish to enable TRIM, you will also want to add `discard` like `luks,discard`

For full list of options, please refer to `man 5 crypttab`.

In any case:

For `crypttab` we could use the device name (`/dev/sda3`)
but that might change when adding or removing other devices,
so it is better to use a UUID (`/dev/disk/by-uuid/...` or partlabel-based path,
from best to worst: PARTLABEL=…, LABEL=…, PARTUUID=…, UUID=…, /dev/name)
instead of direct device path because if the device path changes,
`update-initramfs` will fail and you would have to boot from an old boot entry.

You can get the `PARTLABEL`, `PARTUUID`, and `UUID` with `blkid`:
```
# echo crypt /dev/sda3 none luks > /etc/crypttab
blkid /dev/sda3
```

You might also want to use a UUID (`/dev/disk/by-uuid/...` or partlabel-based path
instead of direct device path, in order to make it static. For this example this
is okay though.
Using for instance the `PARTUUID`:
```
# echo crypt PARTUUID='"'$(blkid --match-tag PARTUUID --output value /dev/sda3)'"' none luks > /etc/crypttab
```

### LUKS and initramfs

Expand Down