Full disk encryption issue since fstab bind edit

hi folks
I have a dropbox folder and so i can use the usual home folders i use bind in fstab to link the dropbox folders. Since adding this it seems that on every reboot i now have to enter the FDE pass phrase for each line in fstab. Is this right and can it be overcome if so. Worth noting that the laptop “forgot” the PIN i set up at install that was working fine untill an update last month. no idea how this happend.

Lenovo X1 Carbon Gen 11

You probably have something misconfigured.

Normally, “/etc/crypttab” should specify which partitions are to be unencrypted during boot. And, then you should be able to access them without again giving the FDE passphrase.

Hi Thanks for replying. So I will provide the crypttab and fstab entris below, if you can see an issue let me know please…

# File created by sdbootutil.  Comments will be removed
# Add the 'x-sdbootutil.ignore' option to un-track a device
cr_swap UUID=fd9c5e12-dc00-4340-b9f2-4a648b4e6ce0 none tpm2-device=auto,tpm2-measure-pcr=yes
cr_root UUID=431d2535-ee33-4976-bcfd-a8836bad7ac5 none x-initrd.attach,tpm2-device=auto,tpm2-measure-pcr=yes


/dev/mapper/cr_root  /            btrfs  defaults              0  0
/dev/mapper/cr_root  /var         btrfs  subvol=/@/var         0  0
/dev/mapper/cr_root  /usr/local   btrfs  subvol=/@/usr/local   0  0
/dev/mapper/cr_root  /srv         btrfs  subvol=/@/srv         0  0
/dev/mapper/cr_root  /root        btrfs  subvol=/@/root        0  0
/dev/mapper/cr_root  /opt         btrfs  subvol=/@/opt         0  0
/dev/mapper/cr_root  /home        btrfs  subvol=/@/home        0  0
/home/sean/Dropbox/sean/Documents        /home/sean/Documents  none defaults,bind 0 0
/home/sean/Dropbox/sean/Pictures         /home/sean/Pictures  none defaults,bind 0 0
/home/sean/Dropbox/sean/Videos           /home/sean/Videos  none defaults,bind 0 0
/home/sean/Dropbox/sean/Downloads        /home/sean/Downloads  none defaults,bind 0 0
/home/sean/Dropbox/sean/Music            /home/sean/Music  none defaults,bind 0 0
/dev/mapper/cr_swap  swap         swap   defaults              0  0
/dev/mapper/cr_root  /.snapshots  btrfs  subvol=/@/.snapshots  0  0
UUID=C4BE-A7EC       /boot/efi    vfat   utf8,dmask=0077       0  2


Thanks

You can try rebuilding the “initrd”
As root:

dracut -f --regenerate-all

I don’t have any experience with Dropbox. I would probably use symbolic links instead of bind mounts.

Symlinks are not as seamless as bind mounts as you have to click through an intermediate symlink rather than just open the folder. But this is not a dropbox issue at all its a linux FDE passkey problem linked to the mount points.

I wondered if i needed to prepend the bind lines with /dev/mapper/cr_root /home

That would probably give an error.

Is Dropbox available at boot time, or only after you login?

Having done some further investigation im pretty sure the fstab edit or dropbox has anything to do with the luks+TPM2 unlocking. This is far more likely a result of a kernel update. The loging in process is as follows:
1 hard boot / reboot
2 Lenovo bios splash
3 opensuse snapshot list on count down timer
4 Passphrase request ( not PIN as on first install)
5 input passphrase nine times
6 Lenovo bios splash
7 SDDM and login to fully functioning DE

see below output of sudo journalctl -b | grep -Ei 'tpm|pcr|cryptsetup|systemd-cryptsetup|failed|unlock'

sudo journalctl -b | grep -Ei 'tpm|pcr|cryptsetup|systemd-cryptsetup|failed|unlock'
Jul 22 19:05:43 X1opensuse kernel: efi: ACPI=0x552fe000 ACPI 2.0=0x552fe014 TPMFinalLog=0x551ae000 SMBIOS=0x5797e000 SMBIOS 3.0=0x57971000 MEMATTR=0x80cc6018 ESRT=0x859da898 MOKvar=0x57965000 RNG=0x552fdf18 INITRD=0x522cd198 TPMEventLog=0x552ef018 
Jul 22 19:05:43 X1opensuse kernel: ACPI: SSDT 0x0000000057962000 00060E (v02 LENOVO Tpm2Tabl 00001000 INTL 20200717)
Jul 22 19:05:43 X1opensuse kernel: ACPI: TPM2 0x0000000057961000 00004C (v04 LENOVO TP-N3X   00001360 PTEC 00000002)
Jul 22 19:05:43 X1opensuse kernel: ACPI: Reserving TPM2 table memory at [mem 0x57961000-0x5796104b]
Jul 22 19:05:43 X1opensuse kernel: tpm_tis NTC0702:00: 2.0 TPM (device-id 0xFC, rev-id 1)
Jul 22 19:05:43 X1opensuse systemd[1]: systemd 261.1 running in system mode (+PAM +AUDIT +SELINUX +APPARMOR +IMA +IPE -SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF -XKBCOMMON -UTMP +LIBARCHIVE)
Jul 22 19:05:43 X1opensuse systemd[1]: Created slice Slice /system/systemd-cryptsetup.
Jul 22 19:05:44 X1opensuse systemd[1]: Condition check resulted in /dev/tpmrm0 being skipped.
Jul 22 19:05:44 X1opensuse systemd[1]: Expecting device /dev/tpm0...
Jul 22 19:05:44 X1opensuse systemd[1]: Found device /dev/tpm0.
Jul 22 19:05:45 X1opensuse systemd[1]: Starting Import TPM2 credentials into the initrd...
Jul 22 19:05:45 X1opensuse systemd[1]: Finished Import TPM2 credentials into the initrd.
Jul 22 19:05:45 X1opensuse systemd-cryptsetup[646]: Set cipher aes, mode xts-plain64, key size 512 bits for device /dev/disk/by-uuid/fd9c5e12-dc00-4340-b9f2-4a648b4e6ce0.
Jul 22 19:05:45 X1opensuse systemd-cryptsetup[646]: Automatically discovered security TPM2 token unlocks volume.
Jul 22 19:05:58 X1opensuse systemd-cryptsetup[646]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:05:58 X1opensuse systemd-cryptsetup[646]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:05:58 X1opensuse systemd-cryptsetup[646]: Bad PIN.
Jul 22 19:06:09 X1opensuse systemd-cryptsetup[646]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:06:09 X1opensuse systemd-cryptsetup[646]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:06:09 X1opensuse systemd-cryptsetup[646]: Bad PIN.
Jul 22 19:06:33 X1opensuse systemd-cryptsetup[646]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:06:33 X1opensuse systemd-cryptsetup[646]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:06:33 X1opensuse systemd-cryptsetup[646]: Bad PIN.
Jul 22 19:06:46 X1opensuse systemd-cryptsetup[646]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:06:46 X1opensuse systemd-cryptsetup[646]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:06:46 X1opensuse systemd-cryptsetup[646]: Bad PIN.
Jul 22 19:07:02 X1opensuse systemd-cryptsetup[646]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:07:02 X1opensuse systemd-cryptsetup[646]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:07:02 X1opensuse systemd-cryptsetup[646]: Bad PIN.
Jul 22 19:07:02 X1opensuse systemd-cryptsetup[646]: TPM2 PIN unlock failed, falling back to traditional unlocking.
Jul 22 19:07:02 X1opensuse systemd-cryptsetup[646]: Set cipher aes, mode xts-plain64, key size 512 bits for device /dev/disk/by-uuid/fd9c5e12-dc00-4340-b9f2-4a648b4e6ce0.
Jul 22 19:07:04 X1opensuse systemd-cryptsetup[646]: Successfully extended PCR index 15 with 'cryptsetup:cr_swap:fd9c5e12-dc00-4340-b9f2-4a648b4e6ce0' and volume key (banks sha256).
Jul 22 19:07:04 X1opensuse systemd-cryptsetup[2793]: Set cipher aes, mode xts-plain64, key size 512 bits for device /dev/disk/by-uuid/431d2535-ee33-4976-bcfd-a8836bad7ac5.
Jul 22 19:07:04 X1opensuse systemd-cryptsetup[2793]: Automatically discovered security TPM2 token unlocks volume.
Jul 22 19:07:04 X1opensuse systemd-cryptsetup[2793]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:07:04 X1opensuse systemd-cryptsetup[2793]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:07:04 X1opensuse systemd-cryptsetup[2793]: Bad PIN.
Jul 22 19:07:15 X1opensuse systemd-cryptsetup[2793]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:07:15 X1opensuse systemd-cryptsetup[2793]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:07:15 X1opensuse systemd-cryptsetup[2793]: Bad PIN.
Jul 22 19:07:25 X1opensuse systemd-cryptsetup[2793]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:07:25 X1opensuse systemd-cryptsetup[2793]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:07:25 X1opensuse systemd-cryptsetup[2793]: Bad PIN.
Jul 22 19:07:35 X1opensuse systemd-cryptsetup[2793]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:07:35 X1opensuse systemd-cryptsetup[2793]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:07:35 X1opensuse systemd-cryptsetup[2793]: Bad PIN.
Jul 22 19:07:46 X1opensuse systemd-cryptsetup[2793]: WARNING:esys:src/tss2-esys/api/Esys_StartAuthSession.c:391:Esys_StartAuthSession_Finish() Received TPM Error
Jul 22 19:07:46 X1opensuse systemd-cryptsetup[2793]: ERROR:esys:src/tss2-esys/api/Esys_StartAuthSession.c:136:Esys_StartAuthSession() Esys Finish ErrorCode (0x0000098e)
Jul 22 19:07:46 X1opensuse systemd-cryptsetup[2793]: Bad PIN.
Jul 22 19:07:46 X1opensuse systemd-cryptsetup[2793]: TPM2 PIN unlock failed, falling back to traditional unlocking.
Jul 22 19:07:46 X1opensuse systemd-cryptsetup[2793]: Set cipher aes, mode xts-plain64, key size 512 bits for device /dev/disk/by-uuid/431d2535-ee33-4976-bcfd-a8836bad7ac5.
Jul 22 19:07:47 X1opensuse systemd-cryptsetup[2793]: Successfully extended PCR index 15 with 'cryptsetup:cr_root:431d2535-ee33-4976-bcfd-a8836bad7ac5' and volume key (banks sha256).
Jul 22 19:07:48 X1opensuse systemd[1]: measure-pcr-validator.service: Deactivated successfully.
Jul 22 19:07:48 X1opensuse systemd[1]: pcr-signature.service: Deactivated successfully.
Jul 22 19:07:48 X1opensuse systemd[1]: Stopped Import TPM2 credentials into the initrd.
Jul 22 19:07:49 X1opensuse systemd[1]: systemd 261.1 running in system mode (+PAM +AUDIT +SELINUX +APPARMOR +IMA +IPE -SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF -XKBCOMMON -UTMP +LIBARCHIVE)
Jul 22 19:07:49 X1opensuse systemd[1]: Make TPM PCR Policy skipped, unmet condition check ConditionSecurity=measured-uki
Jul 22 19:07:49 X1opensuse systemd[1]: Condition check resulted in /dev/tpmrm0 being skipped.
Jul 22 19:07:49 X1opensuse systemd[1]: Expecting device /dev/tpm0...
Jul 22 19:07:49 X1opensuse systemd[1]: Found device /dev/tpm0.
Jul 22 19:07:50 X1opensuse kernel: faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
Jul 22 19:07:50 X1opensuse kernel: cfg80211: failed to load regulatory.db
Jul 22 19:07:51 X1opensuse systemd[1]: Starting Update TPM predictions...
Jul 22 19:07:51 X1opensuse irqbalance[4419]: thermal: failed to receive messages.
Jul 22 19:07:51 X1opensuse irqbalance[4419]: Failed to initialize thermal events.
Jul 22 19:07:51 X1opensuse sh[4517]: Generating TPM2 predictions
Jul 22 19:07:51 X1opensuse kernel: NET: Registered PF_QIPCRTR protocol family
Jul 22 19:07:54 X1opensuse sh[4517]: Generating TPM2 predictions with systemd-pcrlock (systemd-boot)
Jul 22 19:07:58 X1opensuse sh[5046]: Command failed. Reason: exit-code (Status: 1). Restoring backup...
Jul 22 19:07:58 X1opensuse systemd[1]: sdbootutil-update-predictions.service: Failed with result 'exit-code'.
Jul 22 19:07:58 X1opensuse systemd[1]: Failed to start Update TPM predictions.
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.343747 nameservers.go:88: [Error] failed to fetch TP servers. retry(0) servers after 9s: Get "https://downloads.nordcdn.com/configs/dns/cybersec.json": dial tcp: lookup downloads.nordcdn.com on [::1]:53: read udp [::1]:48685->[::1]:53: read: connection refused
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.509288 rotating.go:70: [Error] HTTP/3 request failed: looking address up: looking addr ip up: lookup downloads.nordcdn.com on [::1]:53: dial udp 103.86.96.100:53: connect: network is unreachable rotating to HTTP/1
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.510778 rotating.go:70: [Error] HTTP/3 request failed: looking address up: looking addr ip up: lookup api.nordvpn.com on [::1]:53: dial udp 103.86.96.100:53: connect: network is unreachable rotating to HTTP/1
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.511696 remote.go:279: [Error] failed downloading feature [nordvpn] remote config: remote_hash_not_found: downloading main hash file: Get "https://downloads.nordcdn.com/apps/linux/config/prod/nordvpn-hash.json": looking address up: looking addr ip up: lookup downloads.nordcdn.com on [::1]:53: dial udp 103.86.96.100:53: connect: network is unreachable
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.512600 main.go:784: [Warning] failed to sync device: checking service status: fetching services: Get "https://api.nordvpn.com/v1/users/services": looking address up: looking addr ip up: lookup api.nordvpn.com on [::1]:53: dial udp 103.86.96.100:53: connect: network is unreachable
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.514168 nc.go:224: [NC] DNS resolution failed, using original endpoint, err: looking address up: looking addr ip up: lookup nc-mqtt.nordvpn.com on [::1]:53: dial udp 103.86.99.100:53: connect: network is unreachable
Jul 22 19:07:59 X1opensuse nordvpnd[5055]: 2026/07/22 19:07:59.515082 nc.go:345: [NC] failed to connect:  network Error : dial tcp: lookup nc-mqtt.nordvpn.com on [::1]:53: read udp [::1]:50400->[::1]:53: read: connection refused
Jul 22 19:08:05 X1opensuse nordvpnd[5055]: 2026/07/22 19:08:05.517851 remote.go:279: [Error] failed downloading feature [nordvpn] remote config: remote_hash_not_found: downloading main hash file: Get "https://downloads.nordcdn.com/apps/linux/config/prod/nordvpn-hash.json": looking address up: looking addr ip up: lookup downloads.nordcdn.com on [::1]:53: dial udp 103.86.99.100:53: connect: network is unreachable
Jul 22 19:08:07 X1opensuse NetworkManager[4840]: <info>  [1784743687.4130] device (wlp0s20f3): state change: need-auth -> failed (reason 'no-secrets', managed-type: 'full')
Jul 22 19:08:07 X1opensuse NetworkManager[4840]: <warn>  [1784743687.4134] device (wlp0s20f3): Activation: failed for connection 'SKYY9TJ9'
Jul 22 19:08:07 X1opensuse NetworkManager[4840]: <info>  [1784743687.4135] device (wlp0s20f3): state change: failed -> disconnected (reason 'none', managed-type: 'full')
Jul 22 19:08:07 X1opensuse sddm-helper[5300]: Failed to write utmpx:  No such file or directory
Jul 22 19:08:08 X1opensuse systemd[5381]: Started Unlock kwallet from pam credentials.
Jul 22 19:08:08 X1opensuse nordvpnd[5055]: 2026/07/22 19:08:08.347414 nameservers.go:88: [Error] failed to fetch TP servers. retry(1) servers after 10s: Get "https://downloads.nordcdn.com/configs/dns/cybersec.json": dial tcp: lookup downloads.nordcdn.com on [::1]:53: read udp [::1]:52133->[::1]:53: read: connection refused
Jul 22 19:08:09 X1opensuse wireplumber[5564]: [0:02:27.719822952] [5672]  WARN CameraSensor camera_sensor_legacy.cpp:421 'ov2740 16-0036': Failed to retrieve the sensor crop rectangle
Jul 22 19:08:09 X1opensuse wireplumber[5564]: [0:02:27.734393780] [5672] ERROR SoftwareIsp software_isp.cpp:140 Creating IPA for software ISP failed
Jul 22 19:08:09 X1opensuse wireplumber[5564]: [0:02:27.734437219] [5672]  WARN SimplePipeline simple.cpp:620 Failed to create software ISP, disabling software debayering
Jul 22 19:08:10 X1opensuse kwalletd6[5689]: g_dbus_proxy_get_object_path: assertion 'G_IS_DBUS_PROXY (proxy)' failed
Jul 22 19:08:10 X1opensuse org_kde_powerdevil[5703]: Failed to create wl_display (No such file or directory)
Jul 22 19:08:11 X1opensuse NetworkManager[4840]: ((../src/libnm-systemd-core/src/libsystemd/sd-event/sd-event.c:4458)): assertion '<dropped>' failed
Jul 22 19:08:11 X1opensuse systemd[5381]: app-com.dropbox.Client@autostart.service: Failed with result 'exit-code'.
Jul 22 19:08:12 X1opensuse xdg-desktop-portal-kde[5957]: Failed to create wl_display (No such file or directory)
Jul 22 19:08:12 X1opensuse kglobalacceld[5498]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kglobalaccel'")
Jul 22 19:08:12 X1opensuse ksmserver[5527]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.ksmserver'")
Jul 22 19:08:12 X1opensuse kwin_x11[5530]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kwin'")
Jul 22 19:08:12 X1opensuse kded6[5529]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kded6'")
Jul 22 19:08:12 X1opensuse gmenudbusmenuproxy[5700]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.gmenudbusmenuproxy'")
Jul 22 19:08:12 X1opensuse xembedsniproxy[5704]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.xembedsniproxy'")
Jul 22 19:08:12 X1opensuse kwalletd6[5689]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kwalletd'")
Jul 22 19:08:12 X1opensuse polkit-kde-authentication-agent-1[5702]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Unable to open /proc/5702/root")
Jul 22 19:08:12 X1opensuse org_kde_powerdevil[5703]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.org_kde_powerdevil'")
Jul 22 19:08:12 X1opensuse kactivitymanagerd[5698]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.ActivityManager'")
Jul 22 19:08:12 X1opensuse org_kde_powerdevil[5703]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.org_kde_powerdevil'")
Jul 22 19:08:12 X1opensuse org_kde_powerdevil[5703]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse kaccess[5701]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse org_kde_powerdevil[5703]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse polkit-kde-authentication-agent-1[5702]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Unable to open /proc/5702/root")
Jul 22 19:08:12 X1opensuse xembedsniproxy[5704]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.xembedsniproxy'")
Jul 22 19:08:12 X1opensuse xdg-desktop-portal-kde[5957]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse xdg-desktop-portal-kde[5957]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse xdg-desktop-portal-kde[5957]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse ksmserver[5527]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.ksmserver'")
Jul 22 19:08:12 X1opensuse kded6[5529]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kded6'")
Jul 22 19:08:12 X1opensuse kscreen_backend_launcher[5679]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for ''")
Jul 22 19:08:12 X1opensuse kactivitymanagerd[5698]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.ActivityManager'")
Jul 22 19:08:12 X1opensuse kwalletd6[5689]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kwalletd'")
Jul 22 19:08:12 X1opensuse kwin_x11[5530]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kwin'")
Jul 22 19:08:12 X1opensuse gmenudbusmenuproxy[5700]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.gmenudbusmenuproxy'")
Jul 22 19:08:12 X1opensuse ksecretd[5399]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:12 X1opensuse kglobalacceld[5498]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kglobalaccel'")
Jul 22 19:08:13 X1opensuse akonadi_control[6032]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_control'")
Jul 22 19:08:14 X1opensuse plasmashell[5674]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:14 X1opensuse nordvpnd[5055]: Response: HTTP/1.1 200 - map[Alt-Svc:[h3=":443"; ma=86400] Cf-Cache-Status:[DYNAMIC] Cf-Ray:[a1f463b95f5725e8-LHR] Connection:[keep-alive] Content-Encoding:[gzip] Content-Type:[application/json] Date:[Wed, 22 Jul 2026 18:08:14 GMT] Server:[cloudflare] Set-Cookie:[__cf_bm=HKhsLx44TICbstnlA_i7jXNi28tZKlkvywnC4z4HlH8-1784743694.2932868-1.0.1.1-HW..vV1Zj5n1FAv5vtIp8WSPGznEk_QYOTPMSRujCTEoy7wCw62E.jN90IavMUPsqBBHgVHAwbE.pdoNKPytGjv3cd55.mSAjQeT2c7E22fMTq3Up_l8VigUduCLXCZAkjoNaX8FUBR4IaSV76648g; HttpOnly; SameSite=None; Secure; Path=/; Domain=nordvpn.com; Expires=Wed, 22 Jul 2026 18:38:14 GMT] Strict-Transport-Security:[max-age=31536000; includeSubDomains; preload] Vary:[Accept-Encoding] X-Accept-Before:[1784786894] X-Authorization:[key-id="rsa-key-1",algorithm="rsa-sha256"] X-Content-Security-Policy:[frame-ancestors "none"] X-Digest:[765d3cd1bb2bca8a13ad95b3f5783fff99ac2c5851d88a071c2c5534396169bd] X-Frame-Options:[deny] X-Signature:[aRbPrnbIwfl9ZjhKz6PdZfpvtu9mrNHDUya1cdhFM9VukSMosn6uL5EeQh8F0TrAP5R3SntXylRj88YA+6Ba7Yc4D48yusxM7Rx1TIpLbFI2QPIVqxM6YqV1yStX7gxBsdUhrQyvKTkkDHSG3LwUKbm6e7S3G03n5O1MPP+fxS9TjebWN0z8c+W15Nji75eQ46q/upe1bsS83YYlw0sOpllGRFu+6FGFtTTMqoheKmnEQRjexTZ08q8ja+bRw6s9vywduck/A4xyYrFOttkdFh1uP0UMXJupdhqwuembkk6P3/rBI/5bbPzHefVIe//knrDS8+O/gJz6CkLPdRQf703iqkbSn2QIN294MqrwT0Sh2BW5hO9G73w5VM7FStIIAxn+94p0B57VtUzoQIvz8HfbB/bagcKeYuCNFLCKb8nZ4MkzLVWARke7Bs0VvFLJUVEXYfWUh0O6tqaWq2Aqc3cs0g54hyUFtUYWDWOIEcJli375/eIo7cOQ6RuOSxs2YFdk3CYNP+MMxeEjnJ8oB/xgSZnumQ9iBe3AddhpbeBQUtvcilTZpNUFFkG6VZ53ORN1KZTUeqvB5PTrd4kltY7OMpC9A4MPMn6KSExMrQPEgMPffVZ/NeIDBr64LDFOTTQT+vxRJBVEbYHv3puJeNwbjNMLXPSiMUiPLnz0+Ik=]]
Jul 22 19:08:15 X1opensuse akonadi_migration_agent[6181]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_migration_agent'")
Jul 22 19:08:15 X1opensuse akonadi_followupreminder_agent[6158]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_followupreminder_agent'")
Jul 22 19:08:15 X1opensuse akonadi_newmailnotifier_agent[6183]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_newmailnotifier_agent'")
Jul 22 19:08:16 X1opensuse akonadi_mailmerge_agent[6180]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_mailmerge_agent'")
Jul 22 19:08:16 X1opensuse akonadi_archivemail_agent[6153]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_archivemail_agent'")
Jul 22 19:08:16 X1opensuse akonadi_maildispatcher_agent[6178]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_maildispatcher_agent'")
Jul 22 19:08:16 X1opensuse akonadi_sendlater_agent[6184]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_sendlater_agent'")
Jul 22 19:08:16 X1opensuse akonadi_mailfilter_agent[6179]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_mailfilter_agent'")
Jul 22 19:08:16 X1opensuse DiscoverNotifier[5910]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: Connection already associated with an application ID")
Jul 22 19:08:16 X1opensuse akonadi_unifiedmailbox_agent[6185]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.akonadi_unifiedmailbox_agent'")
Jul 22 19:08:17 X1opensuse kalendarac[5914]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kalendarac'")
Jul 22 19:08:17 X1opensuse kalendarac[5914]: Failed to register with host portal QDBusError("org.freedesktop.portal.Error.Failed", "Could not register app ID: App info not found for 'org.kde.kalendarac'")
Jul 22 19:08:18 X1opensuse ModemManager[4582]: <wrn> [base-manager] couldn't create modem for device '/sys/devices/pci0000:00/0000:00:16.3': Failed to find primary AT port
Jul 22 19:08:36 X1opensuse accounts-daemon[7195]: g_dbus_interface_skeleton_get_object_path: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed
Jul 22 19:08:46 X1opensuse pkexec[7168]: pam_systemd(polkit-1:session): Failed to check if /run/user/0/bus exists, ignoring: Permission denied
Jul 22 19:56:49 X1opensuse kscreenlocker_greet[12501]: pam_unix(kde:auth): unexpected response from failed conversation function
Jul 22 19:56:49 X1opensuse kscreenlocker_greet[12501]: pam_unix(kde:auth): conversation failed
Jul 22 20:15:50 X1opensuse kernel: auxiliary intel_ipu6.psys.40: Failed to get runtime PM
Jul 22 20:15:51 X1opensuse kscreenlocker_greet[12501]: pam_unix(kde:auth): unexpected response from failed conversation function
Jul 22 20:15:51 X1opensuse kscreenlocker_greet[12501]: pam_unix(kde:auth): conversation failed
Jul 22 20:16:18 X1opensuse ModemManager[4582]: <wrn> [base-manager] couldn't create modem for device '/sys/devices/pci0000:00/0000:00:16.3': Failed to find primary AT port
Jul 22 20:27:01 X1opensuse nordvpnd[5055]: Response: HTTP/3.0 200 - map[Alt-Svc:[h3=":443"; ma=86400] Cf-Cache-Status:[DYNAMIC] Cf-Ray:[a1f4d71d9a4dd1fe-LHR] Content-Encoding:[gzip] Content-Type:[application/json] Date:[Wed, 22 Jul 2026 19:27:01 GMT] Priority:[u=3,i=?0] Server:[cloudflare] Server-Timing:[cfExtPri] Set-Cookie:[__cf_bm=0wpUZSeW..LZWUGo5R5fyEe2PDuI4TuUiI9y78Qhb8I-1784748420.7351193-1.0.1.1-Z5geUC6k6XsDidER26fbdG_crtEHQHxmKQrj6nLFN6aKldlbH6JT9.O.S7EwNV9OjoBLO4IgAHhIdWwmwnBqHbNLyhNqB1xox1VMx8fB_wmWg5EoHEDVEQQMFBjK4uXImiYPDadxY8ijqaGmOhG_zA; HttpOnly; SameSite=None; Secure; Path=/; Domain=nordvpn.com; Expires=Wed, 22 Jul 2026 19:57:01 GMT] Strict-Transport-Security:[max-age=31536000; includeSubDomains; preload] Vary:[Accept-Encoding] X-Accept-Before:[1784791621] X-Authorization:[key-id="rsa-key-1",algorithm="rsa-sha256"] X-Content-Security-Policy:[frame-ancestors "none"] X-Digest:[d0d447fb12248b66694fd65e2ef88f954dbf52e487b36e6e5b696d65f52dc029] X-Frame-Options:[deny] X-Signature:[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]]
Jul 22 20:39:53 X1opensuse kscreenlocker_greet[13862]: pam_unix(kde:auth): unexpected response from failed conversation function
Jul 22 20:39:53 X1opensuse kscreenlocker_greet[13862]: pam_unix(kde:auth): conversation failed
Jul 22 21:58:26 X1opensuse kernel: auxiliary intel_ipu6.psys.40: Failed to get runtime PM
Jul 22 21:58:29 X1opensuse unix_chkpwd[14342]: password check failed for user (sean)
Jul 22 21:58:53 X1opensuse ModemManager[4582]: <wrn> [base-manager] couldn't create modem for device '/sys/devices/pci0000:00/0000:00:16.3': Failed to find primary AT port
Jul 22 21:59:03 X1opensuse kscreenlocker_greet[13862]: pam_unix(kde:auth): unexpected response from failed conversation function
Jul 22 21:59:03 X1opensuse kscreenlocker_greet[13862]: pam_unix(kde:auth): conversation failed
Jul 22 23:21:32 X1opensuse kernel: auxiliary intel_ipu6.psys.40: Failed to get runtime PM
Jul 22 23:21:59 X1opensuse ModemManager[4582]: <wrn> [base-manager] couldn't create modem for device '/sys/devices/pci0000:00/0000:00:16.3': Failed to find primary AT port
Jul 23 12:56:10 X1opensuse kernel: auxiliary intel_ipu6.psys.40: Failed to get runtime PM
Jul 23 12:56:11 X1opensuse kscreenlocker_greet[20540]: pam_unix(kde:auth): unexpected response from failed conversation function
Jul 23 12:56:11 X1opensuse kscreenlocker_greet[20540]: pam_unix(kde:auth): conversation failed
Jul 23 12:56:20 X1opensuse nordvpnd[5055]: 2026/07/23 12:56:20.764674 nc.go:345: [NC] failed to connect:  not Authorized
Jul 23 12:56:37 X1opensuse ModemManager[4582]: <wrn> [base-manager] couldn't create modem for device '/sys/devices/pci0000:00/0000:00:16.3': Failed to find primary AT port
Jul 23 13:00:43 X1opensuse sudo[21322]:     sean : TTY=pts/2 ; PWD=/home/sean ; USER=root ; COMMAND=/usr/sbin/cryptsetup luksDump /dev/nvme0n1p2

can you see anything that points the way? Although it says bad pin - the pin doesnt work and i have to resort to the full passphrase

If you think it is a kernel issue, you could try an earlier kernel.

The earliest available appears to be 7.0.12, which I found in:

https://download.opensuse.org/history/20260623/tumbleweed/repo/oss/

I have not been using TPM2 here. I prefer to enter the passphrase each time, but only once per boot. As far as I know, that is handled in the “initrd”, which remembers the first passphrase that you use and tries to use it for other encryptions.

It could be an issue with the TPM2 setup. But since I have not been using it, I really don’t know anything about fixing that.