bugGNU GRUB - Bugs: bug #31843, grub doesn't work with encrypted...

 
 

You are not allowed to post comments on this tracker with your current authentification level.

bug #31843: grub doesn't work with encrypted disk (seagate momentus ST9250414ASG)

Submitted by:  ju <theju>
Submitted on:  Fri 10 Dec 2010 07:46:13 AM UTC  
 
Category: Disk & PartitionSeverity: Major
Priority: 5 - NormalItem Group: Software Error
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: theju
Open/Closed: OpenRelease: 
Release: 1.98Reproducibility: Every Time
Planned Release: None

Fri 07 Jan 2011 04:47:57 PM UTC, comment #3:

Hard-disk level security is shown to be deactivated: "not locked", "not enabled".
A likely explanation is that BIOS caches few sectors and so GRUB still partially sees the encrypted data or the sectors from disk manufacturer software. You can try to circumvent this cache by installing with --disk-module=ata.
This is workaround and the real solution would be if manufacturer software somehow cleaned the BIOS cache.

Vladimir Serbinenko <phcoder>
Project Administrator
Fri 07 Jan 2011 04:35:37 PM UTC, comment #2:

There is no software. It is hardware full disk encryption. Untill disk encryption is activated via Wave software, the disk is lock at startup. You can unlock with a preboot manager provide by wave.

ju <theju>
Fri 07 Jan 2011 04:22:45 PM UTC, comment #1:

What kind of disk encryption software is used? It seems to be the issue with the software in question rather than with GRUB.

Vladimir Serbinenko <phcoder>
Project Administrator
Fri 10 Dec 2010 07:46:13 AM UTC, original submission:

When crypted disk is enable grub did not recognize the disk at first boot :

First boot, the disk preloader ask for the disk password.
After answer disk is decrypted "on the fly" but grup say : "error unknow filesystem"

I do a crtl + alt + suppr and computer reboot with disk uncrypt. This time grub works correctly.

Here are the infos about the disk on a dell latitude E6510 :

ATA device, with non-removable media
Model Number: ST9250414ASG
Serial Number: 5VG493T5
Firmware Revision: DED1
Transport: Serial
Standards:
Used: unknown (minor revision code 0x0029)
Supported: 8 7 6 5
Likely used: 8
Configuration:
Logical max current
cylinders 16383 16383
heads 16 16
sectors/track 63 63
--
CHS current addressable sectors: 16514064
LBA user addressable sectors: 268435455
LBA48 user addressable sectors: 488397168
Logical/Physical Sector size: 512 bytes
device size with M = 1024*1024: 238475 MBytes
device size with M = 1000*1000: 250059 MBytes (250 GB)
cache/buffer size = 16384 KBytes
Nominal Media Rotation Rate: 7200
Capabilities:
LBA, IORDY(can be disabled)
Queue depth: 32
Standby timer values: spec'd by Standard, no device specific minimum
R/W multiple sector transfer: Max = 1 Current = ?
Advanced power management level: 254
Recommended acoustic management value: 208, current value: 208
DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
Cycle time: min=120ns recommended=120ns
PIO: pio0 pio1 pio2 pio3 pio4
Cycle time: no flow control=120ns IORDY flow control=120ns
Commands/features:
Enabled Supported:
* SMART feature set
Security Mode feature set
* Power Management feature set
* Write cache
* Look-ahead
* Host Protected Area feature set
* WRITE_BUFFER command
* READ_BUFFER command
* NOP cmd
DOWNLOAD_MICROCODE
* Advanced Power Management feature set
SET_MAX security extension
* Automatic Acoustic Management feature set
* 48-bit Address feature set
* Mandatory FLUSH_CACHE
* FLUSH_CACHE_EXT
* SMART error logging
* SMART self-test
* General Purpose Logging feature set
* WRITE_{DMA|MULTIPLE}_FUA_EXT
* WRITE_DMA_QUEUED_FUA_EXT
* 64-bit World wide name
* IDLE_IMMEDIATE with UNLOAD
Write-Read-Verify feature set
* WRITE_UNCORRECTABLE_EXT command
* {READ,WRITE}_DMA_EXT_GPL commands
* Segmented DOWNLOAD_MICROCODE
* Free-fall Control feature set
* Gen1 signaling speed (1.5Gb/s)
* Gen2 signaling speed (3.0Gb/s)
* Native Command Queueing (NCQ)
* Host-initiated interface power management
* Phy event counters
Device-initiated interface power management
* Software settings preservation
* SMART Command Transport (SCT) feature set
* SCT Error Recovery Control (AC3)
* SCT Features Control (AC4)
* SCT Data Tables (AC5)
unknown 206[12] (vendor specific)
Security:
Master password revision code = 65534
supported
not enabled
not locked
frozen
not expired: security count
supported: enhanced erase
54min for SECURITY ERASE UNIT. 2min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: 5000c5002ec5476c
NAA : 5
IEEE OUI : 000c50
Unique ID : 02ec5476c
Checksum: correct

and my partition table :
fdisk -l

Disque /dev/sda: 250.1 Go, 250059350016 octets
255 têtes, 63 secteurs/piste, 30401 cylindres
Unités = cylindres de 16065 * 512 = 8225280 octets
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Identifiant de disque : 0x0004f32a

Périphérique Amorce Début Fin Blocs Id Système
/dev/sda1 * 1 13 102400 7 HPFS/NTFS
La partition 1 ne se termine pas sur une frontière de cylindre.
/dev/sda2 13 16446 131994624 7 HPFS/NTFS
/dev/sda3 16446 16932 3906560 82 Linux swap / Solaris
/dev/sda4 16932 30402 108193792 83 Linux

thanks

Juju

ju <theju>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by phcoder (Posted a comment)
  • -unavailable- added by theju (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    No Changes Have Been Made to This Item

    Back to the top


    Powered by Savane 3.1-cleanup