Full Disk Encryption Luks with USB keyfile and fallback to passphase

[Hcl4Tune]

I have a bit of a problem getting this to work. I have 2 key slots on my luks, one for passphrase, another for a keyfile.
here is my

cat /etc/crypttab

sda5_crypt UUID=a928ff73-50f1-44e4-80e1-03b79905d294 UUID=341785d4-e610-49c8-b4ac-a0ec71362f21:/KLinux/keyfile.key luks,noauto,keyscript=passdev

cat /etc/fstab

# /dev/mapper/cryptolinux-cryptroot                           /                          ext4                errors=remount-ro            0       1
  UUID=853af3dc-9042-4144-91d1-a58dfa95b513        /                           ext4                errors=remount-ro            0       1
# /boot was on /dev/sda1 during installation
  UUID=ef571281-d77f-4822-8786-b00c6b94dbb6        /boot                    ext4                defaults                     0       2
  /dev/mapper/cryptolinux-crypthome                         /home                  ext4                defaults                     0       2
  /dev/mapper/cryptolinux-cryptswap                          none                    swap                sw                           0       0
  /dev/sr0                                                                /media/cdrom0      udf,iso9660         user,noauto                  0       0
  UUID=341785d4-e610-49c8-b4ac-a0ec71362f21       /mnt/usb               auto                user,noauto                  0       0

lsblk -o name,uuid,mountpoint

NAME                        UUID                                   MOUNTPOINT
sda                                                                
├─sda1                      ef571281-d77f-4822-8786-b00c6b94dbb6   /boot
├─sda2                                                             
└─sda5                      a928ff73-50f1-44e4-80e1-03b79905d294   
  └─sda5_crypt              jLtERN-KGRK-fasi-PWh0-BRjV-e7Ew-8UFRPM 
    ├─cryptolinux-cryptroot 853af3dc-9042-4144-91d1-a58dfa95b513   /
    ├─cryptolinux-cryptswap 2e1226c7-124f-40f5-ad7b-5eae802b4fc3   [SWAP]
    └─cryptolinux-crypthome 7b7a2296-ccea-4a02-a201-c2a78787bbb1   /home
sdb                                                                
└─sdb1                      341785d4-e610-49c8-b4ac-a0ec71362f21

after restart nothing happens though, it's just stuck on splash screen, what am I missing here?

Also on my previous install of 2020.2 I could boot it with keyfile on USB, but if usb was not present it did not fallback to passphrase option.

Did anyone get this working?

[aaronouthier]

Hmm, not sure about how to use LUKS. I always used VeraCrypt. Haven’t used it in several years. I had actually forgotten about it until just now. Check the documentation, and see if it will help you. Works under Linux, Windows & Mac, and I’ve used the portable version from a PE bootable flash drive for recovery.

[aaronouthier]

https://www.veracrypt.fr/en/Home.html

[centuryold]

Hmm, not sure about how to use LUKS. I always used VeraCrypt. Haven?t used it in several years. I had actually forgotten about it until just now. Check the documentation, and see if it will help you. Works under Linux, Windows & Mac, and I?ve used the portable version from a PE bootable flash drive for recovery.

Thanks for the link aaronouthier. Hope this helps.