Hey,
I had the same problems with installin Debian (Wheezy (7.5) in an existing, encrypted LUKS-Container with LVM-Volume-Group inside and a non-encrypted boot partition outside the LUKS-Container. I solved it the following way:
First backup the file
/etc/crypttab from your "old system" installed in the LUKS-container you want to reuse, if existing. You can use it to easy restore your system later on.
I choosed the normal installation (not expert). This installation does not load "cryptsetup" into it's installation kernel for some reasons. Therefore you have to switch with "<CTRL>+<Alt>+2" to another terminal right at the beginning of the installation (before you choose your language) and "mark" the packages "cryptsetup-udeb" and "crypto-dm-modules" to be loaded into the kernel during installation with following commands:
Code: Select all
anna-install cryptsetup-udeb
anna-install crypto-dm-modules
Switch back to the Installtion with <CTRL>+<Alt>+1 and follow the process as ususal till the partitioning part. Here you have to switch again into the second terminal. Now you have to decrypt your LUKS container and activate the containing LVM-Volume-Group with following commands:
Code: Select all
modprobe dm-crypt # loading the kernel-module. Didn't load automatically in my case
cryptsetup luksOpen /dev/sdxY sdxY_crypt # Opens Luks container (xY has to be adapted to local settings, e.g sda5)
vgscan # detects existing LVM-Volume-Groups
vgchange -a y 'Name-of-LVM-Volume-Group' # Activates LVM-Volume-Group (check output from vgscan for the right name)
After this, switch back to the Installtion and rescan the Hardware by going one step back in the installation. After rescanning you should end up in the manuell partitioning menu. Here the first step is to configure the LVM-Volume-Group. It has to be done to reuse your existing LVM-Group. Nothing has to be change on the LVM-Volume-Group here, as long as you don't want to of course. Be careful in this step and don't accidently format a partition you don't want to format. When you start the LVM-Volume-group configuration and the prompt doesn't mention anything about formating a certain partition, nothing should happen to your data, when you continue.
After that you choose the partition(s) you want your system and /boot installed on as you would normally do and follow the installation.
Before choosing your additional software you should switch again to the 2nd terminal and install cryptsetup. Instead it won't be installed in the final system, for whatever reason.
Now, finish the installation and reboot the system from a live system (in my case Lubuntu 14.04). The normal boot to your fresh installed system will fail because it doesn't decrypt the LUKS-container.
Start a terminal in the Live-System and prepare a chroot session by mounting following devices:
Code: Select all
sudo cryptsetup /dev/sdxY sdxY_crypt # Opens the LUKS-container
sudo mount /dev/mapper/'LV-with-installed-system-on' /mnt
sudo mount /dev/mapper/'LV-with-home-folder-on /mnt/home # If necessary
sudo mount /dev/sdxY /mnt/boot # mount non-encrypted boot partition
Get acces to important Hardware and System-information:
Code: Select all
sudo mount -t devtmpfs /dev /mnt/dev
sudo mount -t devpts /dev/pts /mnt/dev/pts
sudo mount -t sysfs /sys /mnt/sys
sudo mount -t proc /proc /mnt/proc
sudo cp /proc/mounts /mnt/etc/mtab
Finally enter the chroot environment:
I didn't had internet connection in the chroot-environment but you don't need it when cryptsetup was installed during installation.
Now the file
/etc/crypttab must be edited with an editor. The easiest way is to restore the content from a backup version from your "old system" which was installed in the same LUKS-container before. However you can easily create a new entry.
and add the line:
sdxY UUID="UUID-of-sdxY" none luks
Find out the UUID with:
Afterwards you should update your initrd.img with following command to save the new settings and make it available to grub for booting:
There shouldn't be any warning popping up like "cryptsetup: WARNING: invalid line in /etc/crypttab". If so, make sure that you mounted your LUKS-Container with the same name used in
/etc/crypttab (sdxY_crypt is the best choice). When you have no warning, you can leave the chroot environment with "exit" and reboot the system.
After booting your fresh installed Debian system everything should work and you should be asked for the passphrase to decrypt your LUKS-container.
Most if my informations I got from these pages and this thread. So for additional help check out:
http://blog.hartwork.org/?p=1757
http://ubuntuforums.org/showthread.php?t=1205372
http://wiki.ubuntuusers.de/chroot/Live-CD (German)
Best wishes
