[Bug 194249] CDs/DVDs encrypted with LUKS are not correctly mounted

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CDs/DVDs encrypted with LUKS are not correctly mounted


https://bugzilla.redhat.com/show_bug.cgi?id=194249





------- Additional Comments From marco at esiway.net  2008-05-07 15:53 EST -------
Sorry, unfortunately I don't have access to a test system right now. I'll have
to ask a friend to do that, I'll let you know.

A couple of questions: is there a Live image of rawhide that I can use for the
test? Is it possible to run a Live image (w/o installing it) of Fedora 9 Preview
and update it to rawhide with yum? Would that make sense? (that is: does it need
a reboot to test the changes? if so, it wouldn't make any sense to try that).

Anyway, the test procedure is quite simple. Maybe someone else will be able to
test it.

Build a LUKS image, even on file:

# dd if=/dev/zero of=luks.img bs=1024k count=10
# losetup /dev/loop0 luks.img
# echo "test" | cryptsetup --batch-mode luksFormat /dev/loop0
Command successful.
# echo "test" | cryptsetup luksOpen /dev/loop0 test
key slot 0 unlocked.
Command successful.
# mke2fs -q -Ltest /dev/mapper/test
# cryptsetup luksClose test
# losetup -d /dev/loop0

Now luks.img holds a 10MB encrypted (although empty) ext2 fs. If you have a
spare USB key, one you can completely wipe out, just first put the image into
the first partition:

(assuming /dev/sda is the USB storage device)
warning: this destroyes the contents of the key
# dd if=luks.img of=/dev/sda1 

And just try inserting the key. It should ask for the LUKS password, and after
you type it in ('test'), it should mount (hopefully under /media/test). Umount it.

Now, put the same image on the whole USB device, not the first partition:
# dd if=luks.img of=/dev/sda

When you insert the key, you get the usual password requester, but it won't
mount it correctly. If it does, the bug is solved. :)

You'll have to repartition your USB key, tho.


-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.