Bug 1820912 - Fedora Anaconda installer is unable to handle/install on an Encrypted LUKS2 partition
Summary: Fedora Anaconda installer is unable to handle/install on an Encrypted LUKS2 p...
Keywords:
Status: CLOSED DUPLICATE of bug 1668013
Alias: None
Product: Fedora
Classification: Fedora
Component: anaconda
Version: 31
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Anaconda Maintenance Team
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-04 16:19 UTC by Sreyan Chakravarty
Modified: 2020-04-10 20:35 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-04-10 20:35:34 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Anaconda Log (104.81 KB, text/plain)
2020-04-04 16:19 UTC, Sreyan Chakravarty
no flags Details
program.log (75.21 KB, text/plain)
2020-04-04 16:20 UTC, Sreyan Chakravarty
no flags Details
storage log (460.63 KB, text/plain)
2020-04-04 16:21 UTC, Sreyan Chakravarty
no flags Details
ScreenShot1 (80.31 KB, image/png)
2020-04-04 16:21 UTC, Sreyan Chakravarty
no flags Details
ScreenShot3 (131.14 KB, image/png)
2020-04-04 16:22 UTC, Sreyan Chakravarty
no flags Details
ScreenShot2 (80.38 KB, image/png)
2020-04-04 16:22 UTC, Sreyan Chakravarty
no flags Details

Description Sreyan Chakravarty 2020-04-04 16:19:53 UTC
Created attachment 1676239 [details]
Anaconda Log

Description of problem:

The current encryption scheme for LVM+LUKS in Anaconda only supports LUKS on LVM, that first the LVM is created then each logical volume is encrypted using LUKS. This has the disadvantage that the snapshots are not encrypted. 

To avoid this problem you would encrypt a whole partition and then configure LVM on top of it. This is called LVM on LUKS and is not handled correctly my the Anaconda GUI installer.

Version-Release number of selected component (if applicable): 31


How reproducible:

This bug has always been reproducible for me.

I have tested this on both UEFI and BIOS systems, in both cases they fail. For UEFI, I have used a laptop and for BIOS I have used both a laptop and Oracle VirtualBox.

Steps to Reproduce:

The following steps should be done from a Fedora 31 Live Environment.

1. This should be disk partitions, this is on an UEFI+GPT system, but the partition is very similar in MBR+BIOS:

Device       Start        End    Sectors   Size Type
/dev/sda1     2048    1050623    1048576   512M EFI System
/dev/sda2  1050624    2099199    1048576   512M Linux filesystem
/dev/sda3  2099200 1953525134 1951425935 930.5G Linux filesystem

In the MBR+BIOS system, the only difference is that you will not have EFI System Partition (/dev/sda1)

2. Now to setup LUKS Encryption on /dev/sda3 do the following:
 cryptsetup -v --type luks2 luksFormat /dev/sda3

This will ask for your pass phrase so enter one.

3. Now start the Anaconda Installer:

4. Select the harddrive you just setup with LUKS and select "Custom" for partitioning, and click on Next. 

5. On the screen where you can partition your drive you will see that all options for all partitions are greyed out. You however can open the LUKS partition but after opening it you cant add it as the root partition. It errors out by saying "not enough free space on the device" or "unable to allocate requested partition scheme". 

Actual results:
Installation or setting up for an LVM is basically impossible if you are working with an encrypted partition.

Expected results:
Normal/sane partitioning after the LUKS partition is opened in Anaconda. That is I should be able to set up LVM on the partition. 

Additional info:
https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#LVM_on_LUKS

Hardisk Make and Model:
Hitachi HGST HTS541010A9

Laptop Make and Model:
HP Notebook - 15-ac179tx 
https://support.hp.com/in-en/document/c04919819

Comment 1 Sreyan Chakravarty 2020-04-04 16:20:41 UTC
Created attachment 1676240 [details]
program.log

Comment 2 Sreyan Chakravarty 2020-04-04 16:21:08 UTC
Created attachment 1676241 [details]
storage log

Comment 3 Sreyan Chakravarty 2020-04-04 16:21:44 UTC
Created attachment 1676242 [details]
ScreenShot1

Comment 4 Sreyan Chakravarty 2020-04-04 16:22:32 UTC
Created attachment 1676243 [details]
ScreenShot3

Comment 5 Sreyan Chakravarty 2020-04-04 16:22:52 UTC
Created attachment 1676244 [details]
ScreenShot2

Comment 6 Sreyan Chakravarty 2020-04-06 19:47:43 UTC
A workaround is available but this will use LUKS version 1 not LUKS version 2.

No way to use LUKS version 2 at this point.

https://ask.fedoraproject.org/t/ananconda-cant-handle-lvm-on-luks-setup/6112/6?u=sreyan32

Comment 7 Sreyan Chakravarty 2020-04-10 20:35:34 UTC

*** This bug has been marked as a duplicate of bug 1668013 ***


Note You need to log in before you can comment on or make changes to this bug.