Re: Re: LUKS encryption help
Answer to David
>I presume that you have unlocked it successfully in the past.
Yes, I have.
>Is there anything on your system(s) that has changed, and could have
>affected how the keyboard language and layout is defined?
>This is particularly important if your passphrase contains accented
>letters, or punctuation that different keyboards place in different
>places (like @ # ~ quotation marks etc).
This is a laptop so probably not. Though I have updated the BIOS.
>When you try to boot it from a running system, do the logs show any
>errors with reading the disk?
Which logs should I look?
Answer to piorunz
>Can you paste system logs showing that, so we know *why* it doesn't work
Which system logs do you need?
>I have tried to unlock and mount it inside my OS (Manjaro) instead of
>booting it directly but it also didn't work
>Again, we can't tell why it doesn't work without logs
I'm sorry; this is my first time asking for help on a mailing list and
I'm a newbie in GNU+Linux too, please don't take offense on what I might
say and forgive me for my ignorance.
Answer to David
>1. What is the make and model of the external hard drive?
It is a 1Tb WD Elements WDBUZG0010BBK
>2. What ISO image did you use to install Debian onto the external hard drive? What media did you put the Debian installer onto? Do you still have the Debian installer media?
I used the Desktop Debian 10 (can't remember if 10.6 or 10.7, I'm sorry). I used a 32Gb Multilaser USB flashdrive to install it into the external HD. And no, I have formatted the USB flash drive so the installer is no longer there.
>3. When did you install Debian? What choices did you make?
Around May. I have a bad memory so I don't remember exactly when. I used WiFi instead of Ethernet, didn't create a root user, used the defaults for disk partitioning (all in one partition, 1Gb swap), and installed the default utilities plus the SSH server and LXQt.
>4. What is the make, model, and CPU of the computer you used to install Debian?
Acer Aspire E5-573G V3.72, CPU Intel i7-5500U
>5. What is the make, model, and CPU of the computer you are now using to boot Debian?
Same as the above. I didn't try with another computer because I only have this one.
>6. Have you updated/ upgraded Debian since installing it? Did you reboot every time and verify it still worked?
Yes, I installed some other software (timeshift, etc.) and reboot to see if everything was working and didn't have this problem before.
>Does the boot screen offer multiple kernel choices? Have you tried them all?
No, it's only one and the recovery mode and I have tried both.
>If none of the kernel choices work, try booting the Debian installer media, navigate into a recovery console, opening the LUKS container(s), mounting the filesystem(s), and backing up the data.
Tried it and when it asks for the encryption password it doesn't work. It just goes back to the same screen asking for /dev/sdb5's password and doesn't even show an error message.
Oh, and I just ran smartctl --xall /dev/sdb to get that diagnostic data. Here it is:
smartctl 7.2 2020-12-30 r5155 [x86_64-linux-5.10.60-1-MANJARO] (local build)
Copyright (C) 2002-20, Bruce Allen, Christian Franke, www.smartmontools.org <http://www.smartmontools.org>
=== START OF INFORMATION SECTION ===
Device Model: WDC WD10SDRW-11A0XS1
Serial Number: WD-WXF2A80PAF9U
LU WWN Device Id: 5 0014ee 268451e2f
Firmware Version: 01.01A01
User Capacity: 1.000.171.331.584 bytes [1,00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate: 5400 rpm
Form Factor: 2.5 inches
TRIM Command: Available, deterministic
Device is: Not in smartctl database [for details use: -P showall]
ATA Version is: ACS-3 T13/2161-D revision 5
SATA Version is: SATA 3.1, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is: Sun Aug 29 01:45:44 2021 -03
SMART support is: Available - device has SMART capability.
SMART support is: Enabled
AAM feature is: Unavailable
APM level is: 128 (minimum power consumption without standby)
Rd look-ahead is: Enabled
Write cache is: Enabled
DSN feature is: Unavailable
ATA Security is: Disabled, NOT FROZEN [SEC1]
Wt Cache Reorder: Enabled
=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED
General SMART Values:
Offline data collection status: (0x00) Offline data collection activity
was never started.
Auto Offline Data Collection: Disabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: (11040) seconds.
Offline data collection
capabilities: (0x51) SMART execute Offline immediate.
No Auto Offline data collection support.
Suspend Offline collection upon new
command.
No Offline surface scan supported.
Self-test supported.
No Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 2) minutes.
Extended self-test routine
recommended polling time: ( 180) minutes.
SCT capabilities: (0x7035) SCT Status supported.
SCT Feature Control supported.
SCT Data Table supported.
SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAGS VALUE WORST THRESH FAIL RAW_VALUE
1 Raw_Read_Error_Rate POSR-K 200 200 051 - 0
3 Spin_Up_Time POS--K 175 163 021 - 2250
4 Start_Stop_Count -O--CK 100 100 000 - 243
5 Reallocated_Sector_Ct PO--CK 200 200 140 - 0
7 Seek_Error_Rate -OSR-K 200 200 000 - 0
9 Power_On_Hours -O--CK 100 100 000 - 52
10 Spin_Retry_Count -O--CK 100 100 000 - 0
11 Calibration_Retry_Count -O--CK 100 100 000 - 0
12 Power_Cycle_Count -O--CK 100 100 000 - 145
192 Power-Off_Retract_Count -O--CK 200 200 000 - 77
193 Load_Cycle_Count -O--CK 200 200 000 - 602
194 Temperature_Celsius -O---K 109 084 000 - 34
196 Reallocated_Event_Count -O--CK 200 200 000 - 0
197 Current_Pending_Sector -O--CK 200 200 000 - 0
198 Offline_Uncorrectable ----CK 100 253 000 - 0
199 UDMA_CRC_Error_Count -O--CK 200 200 000 - 0
200 Multi_Zone_Error_Rate ---R-- 100 253 000 - 0
||||||_ K auto-keep
|||||__ C event count
||||___ R error rate
|||____ S speed/performance
||_____ O updated online
|______ P prefailure warning
General Purpose Log Directory Version 1
SMART Log Directory Version 1 [multi-sector log support]
Address Access R/W Size Description
0x00 GPL,SL R/O 1 Log Directory
0x01 SL R/O 1 Summary SMART error log
0x02 SL R/O 5 Comprehensive SMART error log
0x03 GPL R/O 6 Ext. Comprehensive SMART error log
0x06 SL R/O 1 SMART self-test log
0x07 GPL R/O 1 Extended self-test log
0x09 SL R/W 1 Selective self-test log
0x10 GPL R/O 1 NCQ Command Error log
0x11 GPL R/O 1 SATA Phy Event Counters log
0x24 GPL R/O 288 Current Device Internal Status Data log
0x30 GPL,SL R/O 9 IDENTIFY DEVICE data log
0x80-0x9f GPL,SL R/W 16 Host vendor specific log
0xa0-0xa7 GPL,SL VS 16 Device vendor specific log
0xa8-0xb6 GPL,SL VS 1 Device vendor specific log
0xb7 GPL,SL VS 74 Device vendor specific log
0xb9 GPL,SL VS 4 Device vendor specific log
0xbd GPL,SL VS 1 Device vendor specific log
0xc0 GPL,SL VS 1 Device vendor specific log
0xc1 GPL VS 93 Device vendor specific log
0xcf GPL VS 65535 Device vendor specific log
0xe0 GPL,SL R/W 1 SCT Command/Status
0xe1 GPL,SL R/W 1 SCT Data Transfer
SMART Extended Comprehensive Error Log Version: 1 (6 sectors)
No Errors Logged
SMART Extended Self-test Log Version: 1 (1 sectors)
No self-tests have been logged. [To run self-tests, use: smartctl -t]
SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.
SCT Status Version: 3
SCT Version (vendor specific): 258 (0x0102)
Device State: Active (0)
Current Temperature: 34 Celsius
Power Cycle Min/Max Temperature: 34/34 Celsius
Lifetime Min/Max Temperature: 24/59 Celsius
Under/Over Temperature Limit Count: 0/0
Vendor specific:
01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
SCT Temperature History Version: 2
Temperature Sampling Period: 1 minute
Temperature Logging Interval: 1 minute
Min/Max recommended Temperature: 0/60 Celsius
Min/Max Temperature Limit: -41/85 Celsius
Temperature History Size (Index): 128 (14)
Index Estimated Time Temperature Celsius
15 2021-08-28 23:38 37 ******************
... ..( 2 skipped). .. ******************
18 2021-08-28 23:41 37 ******************
19 2021-08-28 23:42 ? -
20 2021-08-28 23:43 32 *************
21 2021-08-28 23:44 ? -
22 2021-08-28 23:45 32 *************
23 2021-08-28 23:46 ? -
24 2021-08-28 23:47 32 *************
25 2021-08-28 23:48 32 *************
26 2021-08-28 23:49 33 **************
27 2021-08-28 23:50 33 **************
28 2021-08-28 23:51 34 ***************
29 2021-08-28 23:52 34 ***************
30 2021-08-28 23:53 34 ***************
31 2021-08-28 23:54 35 ****************
32 2021-08-28 23:55 ? -
33 2021-08-28 23:56 29 **********
34 2021-08-28 23:57 29 **********
35 2021-08-28 23:58 30 ***********
36 2021-08-28 23:59 31 ************
37 2021-08-29 00:00 31 ************
38 2021-08-29 00:01 32 *************
39 2021-08-29 00:02 32 *************
40 2021-08-29 00:03 33 **************
41 2021-08-29 00:04 33 **************
42 2021-08-29 00:05 33 **************
43 2021-08-29 00:06 34 ***************
... ..( 2 skipped). .. ***************
46 2021-08-29 00:09 34 ***************
47 2021-08-29 00:10 35 ****************
... ..( 4 skipped). .. ****************
52 2021-08-29 00:15 35 ****************
53 2021-08-29 00:16 36 *****************
... ..( 10 skipped). .. *****************
64 2021-08-29 00:27 36 *****************
65 2021-08-29 00:28 37 ******************
... ..( 9 skipped). .. ******************
75 2021-08-29 00:38 37 ******************
76 2021-08-29 00:39 ? -
77 2021-08-29 00:40 29 **********
78 2021-08-29 00:41 ? -
79 2021-08-29 00:42 29 **********
80 2021-08-29 00:43 ? -
81 2021-08-29 00:44 29 **********
82 2021-08-29 00:45 ? -
83 2021-08-29 00:46 30 ***********
84 2021-08-29 00:47 ? -
85 2021-08-29 00:48 30 ***********
86 2021-08-29 00:49 ? -
87 2021-08-29 00:50 33 **************
88 2021-08-29 00:51 ? -
89 2021-08-29 00:52 35 ****************
90 2021-08-29 00:53 ? -
91 2021-08-29 00:54 35 ****************
92 2021-08-29 00:55 35 ****************
93 2021-08-29 00:56 36 *****************
94 2021-08-29 00:57 ? -
95 2021-08-29 00:58 36 *****************
96 2021-08-29 00:59 36 *****************
97 2021-08-29 01:00 36 *****************
98 2021-08-29 01:01 ? -
99 2021-08-29 01:02 36 *****************
100 2021-08-29 01:03 ? -
101 2021-08-29 01:04 36 *****************
102 2021-08-29 01:05 ? -
103 2021-08-29 01:06 37 ******************
104 2021-08-29 01:07 ? -
105 2021-08-29 01:08 37 ******************
106 2021-08-29 01:09 ? -
107 2021-08-29 01:10 36 *****************
108 2021-08-29 01:11 ? -
109 2021-08-29 01:12 29 **********
110 2021-08-29 01:13 ? -
111 2021-08-29 01:14 29 **********
112 2021-08-29 01:15 ? -
113 2021-08-29 01:16 36 *****************
114 2021-08-29 01:17 ? -
115 2021-08-29 01:18 36 *****************
116 2021-08-29 01:19 ? -
117 2021-08-29 01:20 36 *****************
118 2021-08-29 01:21 36 *****************
119 2021-08-29 01:22 37 ******************
120 2021-08-29 01:23 37 ******************
121 2021-08-29 01:24 ? -
122 2021-08-29 01:25 37 ******************
123 2021-08-29 01:26 37 ******************
124 2021-08-29 01:27 ? -
125 2021-08-29 01:28 37 ******************
126 2021-08-29 01:29 37 ******************
127 2021-08-29 01:30 ? -
0 2021-08-29 01:31 37 ******************
1 2021-08-29 01:32 ? -
2 2021-08-29 01:33 37 ******************
3 2021-08-29 01:34 38 *******************
... ..( 2 skipped). .. *******************
6 2021-08-29 01:37 38 *******************
7 2021-08-29 01:38 ? -
8 2021-08-29 01:39 38 *******************
9 2021-08-29 01:40 38 *******************
10 2021-08-29 01:41 ? -
11 2021-08-29 01:42 34 ***************
12 2021-08-29 01:43 ? -
13 2021-08-29 01:44 34 ***************
14 2021-08-29 01:45 34 ***************
SCT Error Recovery Control command not supported
Device Statistics (GP/SMART Log 0x04) not supported
Pending Defects log (GP Log 0x0c) not supported
SATA Phy Event Counters (GP Log 0x11)
ID Size Value Description
0x0001 2 0 Command failed due to ICRC error
0x0002 2 0 R_ERR response for data FIS
0x0003 2 0 R_ERR response for device-to-host data FIS
0x0004 2 0 R_ERR response for host-to-device data FIS
0x0005 2 0 R_ERR response for non-data FIS
0x0006 2 0 R_ERR response for device-to-host non-data FIS
0x0007 2 0 R_ERR response for host-to-device non-data FIS
0x0008 2 0 Device-to-host non-data FIS retries
0x0009 2 0 Transition from drive PhyRdy to drive PhyNRdy
0x000a 2 1 Device-to-host register FISes sent due to a COMRESET
0x000b 2 0 CRC errors within host-to-device FIS
0x000d 2 0 Non-CRC errors within host-to-device FIS
0x000f 2 0 R_ERR response for host-to-device data FIS, CRC
0x0012 2 0 R_ERR response for host-to-device non-data FIS, CRC
0x8000 4 65 Vendor specific
Answer to bouncingcats
>As root in a terminal on Manjaro, please copy and paste into a reply
>email the output of
> lsblk -f
>command, before connecting the LUKS drive, and again after
>connecting it.
Before:
NAME FSTYPE FSVER LABEL UUID FSAVAIL FSUSE% MOUNTPOINTS
sda
├─sda1
│ vfat FAT32 A2BD-D233 70,8M 26% /boot/efi
├─sda2
│
├─sda3
│ ntfs 2AD4C9CED4C99C87
├─sda4
│ ntfs 584044B640449C9E
└─sda5
ext4 1.0 15dd568a-ec98-4470-8812-a82b15d44995 212,2G 60% /
After:
NAME FSTYPE FSVER LABEL UUID FSAVAIL FSUSE% MOUNTPOINTS
sda
├─sda1 vfat FAT32 A2BD-D233 70,8M 26% /boot/efi
├─sda2
├─sda3 ntfs 2AD4C9CED4C99C87
├─sda4 ntfs 584044B640449C9E
└─sda5 ext4 1.0 15dd568a-ec98-4470-8812-a82b15d44995 212,2G 60% /
sdb
├─sdb1 ext2 1.0 a066ddce-69d9-47df-9030-ccbb8305fd1b
├─sdb2
└─sdb5 crypto_LUKS 2 992108a2-0a0c-4dfc-9482-ce86cbfdfa98
> cryptsetup --version
cryptsetup 2.4.0
>cryptsetup -v isLuks --type luks1 /dev/sdb
Device /dev/sdb is not a valid LUKS device.
Command failed with code -1 (wrong or missing parameters).
>cryptsetup -v isLuks --type luks2 /dev/sdb
Command failed with code -1 (wrong or missing parameters).
>When copy and pasting, be sure to include the command that
>you entered, with its output immediately underneath, so that we
>can see the command that generated the output.
I'm sorry I didn't do this before, but I did show what commands I entered. I'll be doing it from now on.
>In the same manner, please show us the command you are typing
>to try to open the drive in Manjaro, together with its exact output.
I try to open it with the graphical tools such as gnome-disks (gnome-disk-utility) and XFCE's default file manager on Manjaro. Both don't work.
Answer to J.
>Are you completely sure that you wrote that password down correctly and
>that you are reading it correctly? Can you distinguish l and 1, O and 0
>etc?
Yes. Thinking that might have been the case I have already tried every possible combination of characters and the result is still the same, but I am very sure the password I wrote on paper is right.
>Is there any invisible whitespace? Did you intentionally leave
>something out because you feared somebody could find that piece of
>paper?
No invisible whitespace, I did not use spaces for this password and already tried this too. And I did not leave anything out of the paper - I always write the correct password.
>Please use your current fear as impetus for setting up a proper backup
>solution. Hardware dies, software is buggy, humans make mistakes,
>catastrophes happen.
Will do. Thank you.
I'm sorry for taking such a long time to respond. I was expecting an e-mail answer.
Reply to: