-
Notifications
You must be signed in to change notification settings - Fork 344
Description
Distribution
CachyOS
Package version
6.6.3
Frequency
Always
Bug description
Opening LUKS Encrypted LVM partition:
- Doesn't save password to keyring
- Gives "Operation Canceled"
Steps to reproduce
Pre:
- Create a partition (use GParted for visual feedback, so for safety of your data)
LUKS
- Set it up a LUKS Partition
sudo cryptsetup -y -v luksFormat /dev/MYLUKS,MYLUKS is a name of the mapper I chose - Open LUKS
sudo cryptsetup open /dev/<device> MYLUKS
LVM
Here is a recap of how LVM works
-
Create Physics Volume (LVM "partition")
sudo pvcreate /dev/mapper/MYLUKS -
Create Volume Group (abstraction that combines several partitions)
sudo vgcreate vg01 /dev/mapper/MYLUKSI called it vg01 -
Create Logical Volume (actual useful space)
sudo lvcreate -l 100%FREE -n lv01 vg01I called it lv01
File system (EXT4)
- sudo mkfs.ext4 /dev/vg01/lv01
- Mount it and create a file the to verify later that you opened a correct thing
Close everything (or just reboot)
sudo umount /dev/vg01/lv01
sudo lvchange -a n /dev/vg01/lv01
sudo cryptsetup luksClose /dev/mapper/MYLUKS
Reproduction
- Click on the encrypted device in Nemo
- It will prompt for the passphrase, choose "remember forever"
- It will prompt for sudo password
- "Operation was canceled"
- Click on the device again
- The device is opened
- Close as step 9 in pre, or reboot
- Click again
- Still prompts for password
Expected behavior
Saves passphrase in keyring
Opens LVM without "Operation was canceled"
Additional information
NOTE:
The same error happens in GNOME Files
In Dolphin (KDE FIles), the password is saved but it is still a two step process
If I save the password manually the password prompt is bypassed, just so you are sure that my keyring works
secret-tool store -l "Encryption passphrase for <device name> (Disk)" gvfs-luks-uuid <UUID>
(get UUID with GParted or lsblk -f 5th column called UUID)
This issue is important because LVM inside LUKS is how default Ubuntu encryption works