Can't Boot to Fully Encrypted Disk

Teams Infrastructure
1

EDIT: Appearently, steps below work fine on RL8.7, but not on RL9.1.

I’m trying to learn installation using text mode. But I can’t figure how to boot to full encrypted disk with multiple lvm partitions. The steps I took (over and over) is down below:

(parted) mklabel msdos
(parted) mkpart primary 1 513MiB
(parted) mkpart extended 513MiB -1s

Then I crete a logical volume in the /dev/sda2 by using fdisk.

cryptsetup luksFormat --type luks1 /dev/sda5
cryptsetup luksOpen /dev/sda5 sda5_crypt

vgcreate LVG /dev/mapper/sda5_crpyt
lvcreate LVG -L 10GiB -n root
lvcreate LVG -L 5GiB -n home
lvcreate LVG -L 3GiB -n srv
lvcreate LVG -L 2.3GiB -n swap
lvcreate LVG -L 3GiB -n tmp
lvcreate LVG -L 3GiB -n var
lvcreate LVG -L 4GiB -n var-log

mkfs.ext2 /dev/sda1
mkfs.ext4 /dev/LVG/home
mkfs.ext4 /dev/LVG/root
mkfs.ext4 /dev/LVG/srv
mkfs.ext4 /dev/LVG/tmp
mkfs.ext4 /dev/LVG/var
mkfs.ext4 /dev/LVG/var-log
mkswap /dev/LVG/swap

After these, using text mode, manually assigned mount points, disabled KDump, set rootpw, installation options et cetera. Installation goes on without an error. But booting is stucked like this:

Ekran Resmi 2023-01-21 ÖÖ 2.32.23
Ekran Resmi 2023-01-21 ÖÖ 2.32.231966×140 30.6 KB

I did the same partition using graphic installer, trying both luks1 and luks2. It never made any difference. Only way the system able to boot was when the encrypted disk only had / and swap partitions.

What do I do wrong and/or don’t I do? I’ve been researching for about 2 weeks now, and run out of resources.

EDIT: I’ve tried the exact same procedure in v8.7 minutes ago and system booted as it should.

2

Have you confirmed that a default install of RL9.1 works on your hardware?
RHEL 9 requires a processor that supports AMD x86_64 (v2).
I don’t know the exact criteria but if you install inxi in RL8 and then issue this command
inxi -Cx
then post the output here.
Sample from my system below.

$ inxi -Cxx
CPU:
  Info: dual core model: Intel Core i7-6600U bits: 64 type: MT MCP
    arch: Skylake rev: 3 cache: L1: 128 KiB L2: 512 KiB L3: 4 MiB
  Speed (MHz): avg: 1750 high: 2800 min/max: 400/3400 cores: 1: 700 2: 2800
    3: 2800 4: 700 bogomips: 22399
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3

I think it is sse4_2 that has to be present.
Once we know that the focus can return to the particulars of your use case.

1 Like
3

I have not. But if that was the case, wouldn’t I be unable to boot any other ways too?

It did work as so:

Screenshot from 2023-01-21 22-41-01
Screenshot from 2023-01-21 22-41-011069×449 29.3 KB 

[root@localhost ~]# inxi -Cx
CPU:
  Info: 6-core model: AMD Ryzen 5 4600H with Radeon Graphics bits: 64
    type: MT MCP arch: Zen 2 rev: 1 cache: L1: 384 KiB L2: 3 MiB L3: 8 MiB
  Speed (MHz): avg: 1396 high: 1397 min/max: 1400/3000 boost: enabled
    cores: 1: 1397 2: 1396 3: 1397 4: 1397 5: 1397 6: 1397 7: 1397 8: 1397
    9: 1395 10: 1397 11: 1397 12: 1397 bogomips: 71858
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm

I can only upload 1 img per post, so, copy-pasted it.

I will test if any one of the partitions cause this error. Though, it might be a grub conf problem, I assume. Since the encrypted partition does open, but any the other partitions, which are below / (root), does not mount automatically. No errors on installation or memory. All functionalities works just fine when mounted using the installation image’s rescue shell.

The grub.conf, initramfs and crypttab files of RL8.7 and RL9.1 seemed similar to me. But as being a complete beginner, I don’t know if the problem caused by me doing something wrong or there is something off in RL9.1.

4

No your cpu is not the issue. So now someone who knows lvm will have to take it from here. And encryption.

1 Like
5

Thanks for the info. Is there a why for the cpu flag?