Gentoo Archives: gentoo-user

From: David W Noon <dwnoon@××××××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Re: Full disk encryption
Date: Thu, 01 Dec 2011 00:28:54
Message-Id: 20111201002706.5a77f2fd@karnak.local
In Reply to: Re: [gentoo-user] Re: Full disk encryption by Neil Bothwick
1 On Wed, 30 Nov 2011 23:26:56 +0000, Neil Bothwick wrote about Re:
2 [gentoo-user] Re: Full disk encryption:
3
4 > On Wed, 30 Nov 2011 22:07:35 +0000, David W Noon wrote:
5 >
6 > > > Why do you need e2fsprogs on an initramfs?
7 > >
8 > > One needs e2fsck to do a "preen" prior to mounting the required
9 > > volume(s).
10 >
11 > Why not mount root read-only, just like in a non-initramfs system?
12 >
13 > Any e2fsck commands will be run during the boot runlevel, before
14 > remounting root rw.
15
16 Unfortunately, the system does not work that way. When running inside
17 an initramfs, one cannot load executable content from mount points --
18 only from within the initramfs. So, while it is perfectly possible to
19 do "ls /mnt/root/sbin/e2fsck" (assuming the root partition has been
20 mounted ro as /mnt/root), it is not possible to load and execute that
21 program. [And, yes, I have adjusted the PATH and LD_LIBRARY_PATH shell
22 variables to address the program and library directories on the mounted
23 root partition.] After performing a switch_root to the actual root
24 partition, this restriction is lifted.
25
26 When running without (or with the default) initramfs, the root
27 partition itself becomes the active filesystem, so loading programs
28 from /sbin or /bin and libraries from /lib works as expected.
29
30 This might be one of Dale's problems, if he was trying to use commands
31 from the root filesystem within the initramfs.
32 --
33 Regards,
34
35 Dave [RLU #314465]
36 *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
37 dwnoon@××××××××.com (David W Noon)
38 *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-user] Re: Full disk encryption Dale <rdalek1967@×××××.com>
Re: [gentoo-user] Re: Full disk encryption Michael Mol <mikemol@×××××.com>
Re: [gentoo-user] Re: Full disk encryption Neil Bothwick <neil@××××××××××.uk>