boot ask encrypted backup SD card.

English Install/Boot/Login
#1

Hello,

I have tumbleweed on my system with 3 disks (sda, sdb and sdc)
I formatted a SD card with filesystem ext4 encrypted via the YaST partitioner and asked to not mount it.
Thereafter in mounted the SD card partition (dev/sdd1) and did a backup on it.

This morning after an update via “zypper dup” I rebooted the system and i received this

A start jod is running for dev-sdd1.device (0.x min/1.30 min)

After 1.30 minutes the boot continued but the same messages were displayed at the end of the process

fstab

# cat /etc/fstab
/dev/disk/by-id/scsi-3600508b1001c99233458581ffb65cc88-part2  /       ext4  acl,user_xattr  1  1
LABEL=usr    /usr    ext4  acl,user_xattr  1  2
LABEL=home   /home   ext4  acl,user_xattr  1  2
LABEL=srv    /srv    ext4  acl,user_xattr  1  2
LABEL=var    /var    ext4  acl,user_xattr  1  2
LABEL=local  /local  ext4  acl,user_xattr  1  2
LABEL=opt    /opt    ext4  acl,user_xattr  1  2
/dev/disk/by-id/scsi-3600508b1001c99233458581ffb65cc88-part1  swap    swap  defaults        0  0

journalctl

Dec 23 08:36:12 hpprol2 systemd[1]: Started Show Plymouth Boot Screen.
Dec 23 08:37:37 hpprol2 systemd[1]: dev-sdd1.device: Job dev-sdd1.device/start timed out.
Dec 23 08:37:37 hpprol2 systemd[1]: Timed out waiting for device dev-sdd1.device.
Dec 23 08:37:37 hpprol2 systemd[1]: Dependency failed for Cryptography Setup for cr_usb-Multiple_Card_Reader_058F63666438-0:0-part1.
Dec 23 08:37:37 hpprol2 systemd[1]: Dependency failed for Local Encrypted Volumes.
Dec 23 08:37:37 hpprol2 systemd[1]: cryptsetup.target: Job cryptsetup.target/start failed with result 'dependency'.
Dec 23 08:37:37 hpprol2 systemd[1]: systemd-cryptsetup@cr_usb\x2dMultiple_Card_Reader_058F63666438\x2d0:0\x2dpart1.service: Job systemd-cryptsetup@cr_usb\x2dMultiple_Card_Reader_058F63666438\x2d0:0\x2dpart1.service/start failed with result 'dependency'.
Dec 23 08:37:37 hpprol2 systemd[1]: dev-sdd1.device: Job dev-sdd1.device/start failed with result 'timeout'.

end of boot

Dec 23 08:39:07 hpprol2 systemd[1]: dev-sdd1.device: Job dev-sdd1.device/start timed out.
Dec 23 08:39:07 hpprol2 systemd[1]: Timed out waiting for device dev-sdd1.device.
Dec 23 08:39:07 hpprol2 systemd[1]: Dependency failed for Cryptography Setup for cr_usb-Multiple_Card_Reader_058F63666438-0:0-part1.
Dec 23 08:39:07 hpprol2 systemd[1]: systemd-cryptsetup@cr_usb\x2dMultiple_Card_Reader_058F63666438\x2d0:0\x2dpart1.service: Job systemd-cryptsetup@cr_usb\x2dMultiple_Card_Reader_058F63666438\x2d0:0\x2dpart1.service/start failed with result 'dependency'.
Dec 23 08:39:07 hpprol2 systemd[1]: Startup finished in 9.786s (kernel) + 4.502s (initrd) + 3min 2.213s (userspace) = 3min 16.502s.

crypttab

# cat crypttab
cr_usb-Multiple_Card_Reader_058F63666438-0:0-part1  /dev/sdd1

in the man I see that i can add an option “noauto” to avoid opening at boot.
Questions

  • is the option “noauto” enough to avoid this delay?
  • Can I remove the data in crypttab or should this give a problem when I want mounting the SD card?
  • If I create another encrypted SD card how can I define in YaST to not mount it at boot?
  • Can I mount simultaneously two encrypted SD card?

Many thanks in advance
Philippe

#2

yes

  • Can I remove the data in crypttab or should this give a problem when I want mounting the SD card?
    If you know how to manually configure encrypted container you can remove crypttab.
  • If I create another encrypted SD card how can I define in YaST to not mount it at boot?
    It has nothing to do with mouting. I do not know whether yast allows marking encrypted device as “noauto”.
  • Can I mount simultaneously two encrypted SD card?
    If you can physically access both at the same time - why not.
#3

It should be fine to remove that from “crypttab”. I only have internal disks listed in “crypttab”. I keep external drives out of there. If you keep it out of “crypttab”, you should probably also keep it out of “fstab”.

To mount without a crypttab entry:


cryptsetup luksOpen /dev/whatever cr_some_funky_name
mount /dev/mapper/cr_some_funky_name /mnt

Change the “/mnt” to wherever you want to mount. The “cr_some_funky_name” can be anything that doesn’t conflict, but it must be the same in both of those lines. Avoid special characters.

#4

Thanks,

I had already found the open and the mount in the man of cryptsetup.
It works perfectly after removing it from cryptab. A bit strange that the YaST partitioner adds it therein even if it is a removable SD card.

Regards
Philippe