Bug 459094

Summary:

Password prompt for encrypted devices doesn't show which device is about to decrypt

Product:

[Fedora] Fedora

Reporter:

Alexander Todorov <atodorov>

Component:

plymouth

Assignee:

Ray Strode [halfline] <rstrode>

Status:

CLOSED RAWHIDE

QA Contact:

Fedora Extras Quality Assurance <extras-qa>

Severity:

medium

Docs Contact:

Priority:

medium

Version:

rawhide

CC:

dlehman, krh, poelstra

Target Milestone:

---

Target Release:

---

Hardware:

All

OS:

Linux

Whiteboard:

Fixed In Version:

Doc Type:

Bug Fix

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2008-08-29 20:50:54 UTC

Type:

---

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Bug Depends On:

Bug Blocks:

438943

Attachments:

Description	Flags
screen shot of the boot screen	none
passphrase prompt in visual mode	none

Description Alexander Todorov 2008-08-14 13:06:17 UTC

Description of problem:
When booting for the first time and having encrypted partitions plymouth is showing the string Password: which 
- might look strange to a newbie, making them think this is the login password
- is not showing which device is the password meant to decrypt

Version-Release number of selected component (if applicable):
f10-alpha

How reproducible:
Alwaya

Steps to Reproduce:
1. Create an encrypted partition(s) during install
2. Boot the system

  
Actual results:
Only the string "Password:" is shown on a black background

Expected results:
Enter the LUKS passphrase for /dev/mapper/luks-VolGroup00 :

Additional info:
This can be considered a regression from Fedora 9 since this prompt is properly fixed there. 

Additional improvement can be to show the actual mount point instead of the underlying device, i.e. 
Enter password for / (/home, swap, etc):

Comment 1 Alexander Todorov 2008-08-14 13:07:00 UTC

Created attachment 314314 [details]
screen shot of the boot screen

Comment 2 Alexander Todorov 2008-08-14 14:28:59 UTC

Created attachment 314320 [details]
passphrase prompt in visual mode

The previous attachment was in text mode of plymouth and this one is in visual mode. It's even worse as it only displays an icon and a text entry field with no explanation to what should be entered.

Comment 3 Ray Strode [halfline] 2008-08-14 14:52:27 UTC

So this was discussed a while back and we came to a few conclusions:

1) we really need to give a description of what partition is getting unlocked when it's ambiguous

2) it's hard to show text in the initrd. No translations, no font rendering libraries (in the case of graphical boot), etc

We should be able to satisfy 2) by loading the font rendering libraries after / is mounted, and just have a generic prompt for the first password (/)

This is on the TODO list at the http://wiki.fedoraproject.org/wiki/Features/BetterStartup

Right now, we don't do it right.

Comment 4 Ray Strode [halfline] 2008-08-27 20:28:10 UTC

So plymouth now supports, e.g.,

plymouth ask-for-password --prompt "/opt is password protected"

(or more likely something like:

format=$(gettext --domain=init-scripts "%s is password protected")
prompt=$(printf $format $mount_point)

plymouth ask-for-password --prompt $prompt --command "cryptsetup luksOpen ...")

need to do the rc.sysinit side of things now

Comment 5 Ray Strode [halfline] 2008-08-29 20:50:54 UTC

i've posted a patch for the rc.sysinit side of things at bug 460702