Ubuntu - ZFS on Linux Encrypted Root Pool
0
votes
1
answer
2215
views
I am excited that Canonical has added experimental ZoL (ZFS on Linux) support to Ubuntu v20.04 LTS Ubiquity (installer). Unfortunately, Ubiquity does not yet have the ability to prompt for a ZFS encryption passphrase.
I would like to give a big thank you to Sean Reifschneider for the blog entry "Installing Ubuntu 20.04 with ZFS Native Encryption Enabled":
https://linsomniac.gitlab.io/post/2020-04-09-ubuntu-2004-encrypted-zfs/
I followed this verbatim and simplified the instructions as follows:
Boot from "ubuntu-20.04-desktop-amd64.iso".
"Install: Welcome" -> button "Try Ubuntu" ->
NOTE: The following is for zpool create of the rpool.
-> button "Show Applications" -> shortcut "Terminal" -> sudo nano --linenumbers /usr/share/ubiquity/zsys-setup
Scroll down to line 310. Type "echo MYPASSWORD | " before the text "zpool create -f \". The finished line should be the following:
echo MYPASSWORD | zpool create -f \
NOTE: Line 320 should contain the following text:
-O sync=disabled \
Insert new lines after line 320 with the following text:
-O recordsize=1M \
-O encryption=aes-256-gcm \
-O keylocation=prompt \
-O keyformat=passphrase \
-> Ctrl + o -> Enter -> Ctrl + x
Exit "Terminal".
From the desktop, double-click "Install Ubuntu 20.04 LTS".
Please understand that I was performing a first run through test, and I literally made the ZFS encryption passphrase "MYPASSWORD" (without the quotes). When editing "zsys-setup", I do not recall whether I typed the passphrase using "Caps Lock" or holding down the key "Shift". Perhaps it does not matter.
After installing Ubuntu on encrypted ZFS root and dealing with the intermittent issue of Plymouth (graphical boot splash screen) not displaying the encryption passphrase prompt, I encounted an unexpected issue.
When the "Caps Lock" is enabled, and I enter the passphrase, it displays the following:
Enter passphrase for 'rpool':
Key load error: Incorrect key provided for 'rpool'.
My self-answer will follow momentarily.
Asked by tirvgqnf
(139 rep)
Apr 30, 2020, 08:46 AM
Last activity: May 4, 2020, 09:40 AM
Last activity: May 4, 2020, 09:40 AM