You are not logged in.
I'm trying to install devuan with complete disk encryption on a Lenovo T14 Gen4. When booting I see 'cannot find tag 0x0' or something like that but then it works until software installation at the end where it freezes, many times at 71%, but it's not always like that. I tried to install Chimaera as this is running on another computer and that also froze at 26% when installing software. If anyone have the time to help me out I'd really appreciate it. I've been trying to research the issue, and testing different bios setup, but I don't know it very well and it would be better to hear from someone with knowledge and experience than trying to guess.
Offline
There is not much information in your description to help you really.
Just make sure that:
1. Your BIOS/EFI setup is correct (set it to factory defaults and disable secure-boot (EFI) to start with)
2. Your install media is ok (CD/DVD read errors or problems, good USB-sticks) and be sure the checksum of your downloaded iso is okay
3. Your disk is working properly (do a low-level format in case...)
4. Let the installer propose a good disk-geometry (it does)
5. And of course, your computer is fault-free - I suppose (mem-tests, CPU-tests okay?) in the very first place.
Good luck.
Offline
You might consider that Chimaera even is too old for that laptop. Chimaera is oldstable anyhow, Daedalus is stable.
Online
Thank you very much for the support. I will make sure to check everything again and note down errors to be more specific henceforth.
Offline
How do/did you set up "full disk encryption"?
For me the chimaera installer only lets me reduce the disk to a single partition and encrypt that; is that what you mean?
But then, for me, the installer objects and goes into loop trying to force me to have a separate unencrypted /boot partition while not allowing me to erase the setup.
So, would you mind describing your "full disk encryption" (so I can trial it).
Offline
Just my two cents: FDE works fine when pre-partitioning with a GParted Live and manual partitioning in the installer. Valid all along from ASCII to Daedalus.
Online
Thanks, yes, and it also needs an early short command line detour for device mapping.
But that detour is not available for booting the installed system, and I'm not sure how to set up grub for that... it seems to need a boot device outside of the encrypted disk?
Offline
Yes, the traditional setup requires an unencrypted /boot partition. I use that setup. In the encrypted partition I do setup a LVM with 2 logical devices for / and swap. /home always is on a separate device, except for in a VM.
There is no need for special "early short command line detour for device mapping". You go through the installer step by step, and everything thats needed is prepared, no matter if legacy or efi installs.
With Arch Linux I could get away without that, but that requires a grub that can decipher luks2 and I think some tweaks inside of systemd.
Last edited by rolfie (2024-04-26 16:55:58)
Online
If /boot is part of the encrypted root filesystem, add the following line to /etc/default/grub and then run 'update-grub'.
GRUB_ENABLE_CRYPTODISK=y
Offline
@fsmithred: never tried this yet because I wanted to used luks2. Is the grub as shipped with Daedalus now able to decipher luks2?
Online
It looks like grub can handle luks2 now. (since 2020)
https://www.phoronix.com/news/GRUB-Boot … sk-Encrypt
Offline
I just followed the guide and chose the LVM full disk encryption. Now it works until the end, but when rebooting it several times reject my password when I'm fairly sure it was not incorrect, then it works and it's like having a computer from the 90ies. It takes ten minutes to get from the username to the password box and then another ten to get in to the computer. when I restarted I could type the encryption password and then the screen went black and nothing more happened. I don't really know what I'm doing wrong.
Offline
That sounds like it might be a hardware problem. You can check hard disk read/write speeds with hdparm -Tt /dev/sda and you can check overall disk health with smartmontools. e.g. smartctl -a /dev/sda or to run a short test smartctl -t short /dev/sda Maybe run memtest, too.
Offline
what is the history of the hardware/machine/unit?
was it new-in-factory-sealed-packaging when you received it?
how did the unit function with the pre-installed operating system(if any)?
how does the unit function while using another/various-other distros(livecd/livedvd/liveusb)?
Be Excellent to each other and Party On!
https://www.youtube.com/watch?v=rph_1DODXDU
https://en.wikipedia.org/wiki/Bill_%26_Ted%27s_Excellent_Adventure
Do unto others as you would have them do instantaneously back to you!
Online