mkinitramfs error during luks setup

[3dog]

Greetings,

i'm trying to follow the instructions for encrypting a RPi/3 with Kali as shown here as several other have. I've searched through the other issues on here and didn't find a solution to the problem I'm having.

When creating the initramfs.gz I get a couple of errors:

[email protected]:/# [email protected]:/# mkinitramfs -o /boot/initramfs.gz
cryptsetup: ERROR: Couldn't normalise device /dev/root 
cryptsetup: ERROR: Couldn't find sysfs directory corresponding to /dev/root
cryptsetup: WARNING: The initramfs image may not contain cryptsetup binaries
    nor crypto modules. If that's on purpose, you may want to uninstall the
    'cryptsetup-initramfs' package in order to disable the cryptsetup initramfs
    integration and avoid this warning.

I have found other issues with files being in different directories, but there is no file named "root" in the /dev folder. Using

find / -name root

returns several files and I don't think I missed a step.

Any ideas would be appreciated.

I'm no expert at Linux, I can barely fumble my way through, but I'm learning.

[lefty]

I'm getting the same error. I haven't found anything in the cryptsetup or mkinitramfs documentation to solve the problem yet. Any luck finding a solution, 3dog?

[vlad_the_maker]

Had the same issue. Here is how I fixed it.

1) Force cryptsetup to be included in the initramfs. Open

/etc/cryptsetup-initramfs/conf-hook

and add the following line to it

CRYPTSETUP=y

2) Generate initramfs

mkinitramfs -o /boot/initramfs.gz

3) VERIFY cryptsetup binaries and libraries are included

lsinitramfs /boot/initramfs.gz | grep cryptsetup

you should have the following output:

usr/lib/arm-linux-gnueabihf/libcryptsetup.so.12
usr/lib/arm-linux-gnueabihf/libcryptsetup.so.12.3.0
usr/lib/cryptsetup
usr/lib/cryptsetup/askpass
usr/lib/cryptsetup/functions
usr/sbin/cryptsetup

4) copy everying to the sdcard as described in the official tutorial step 4 (https://www.kali.org/tutorials/secure-kali-pi-2018/).

Note: your first boot will be broken. here is how you fix it.
Take note of the error messages along the lines "device /dev/mapper/crypt does not exist". It will tell you where your encrypted partition sould be mounted.

5) Wait until you are dropped into initramfs shell, then open your encrypted partition with:

cryptsetup luksOpen /dev/mmcblk0p2 crypt

6) Verify that your encrypted partition is open:

ls -la /dev/mapper

7) Once your partition is mounted, exit initramfs by typing

exit

8) boot into your encrypted system and regenerate initramfs.gz

mkinitramfs -o /boot/initramfs.gz

Hope this helps

[3dog]

Thanks Vlad. I'll try that and report back

[MiAl]

vlad_the_maker, thank you for your guide. It has a typo. Instead of line:

CYPTSETUP=y

It should be:

CRYPTSETUP=y

[vlad_the_maker]

MiAl, Glad to help. Was the guide pretty easy to follow? Thank you for the typo pointer! Just fixed it.