Ubuntu Core 20 unable to unlock FDE disks on boot (i.MX8)

[ruhan.vanderberg]

Hello, I have created an Ubuntu Core 20 image for my i.MX8 MP EVk devkit, and it appears while FDE works, it cannot decrypt the disk for booting.

[  OK  ] Mounted /run/mnt/ubuntu-seed.
         Starting /usr/sbin/fde-reveal-key...
M/TA: FDE cmd_id = 0x2
[  OK  ] Started /usr/sbin/fde-reveal-key.
[    7.331082] device-mapper: table: 253:0: crypt: unknown target type
[    7.338862] device-mapper: ioctl: error adding target to table
Please enter the recovery key for disk /dev/disk/by-partuuid/55a9b558-04: ******
Please enter the recovery key for disk /dev/disk/by-partuuid/55a9b558-04: (press TAB for no echo)

Am I missing something?

[jocado]

Hi,

I don’t know if I can help or not, but there isn’t a lot of info to go on in your post. Perhaps providing a bit more would help.

As it’s ARM, I presume the setup is not UEFI and TPM.

Are yo using a crypto device, and how have you setup the FDE hooks etc ?

Cheers, Just

[ruhan.vanderberg]

Hello, I made a second post here:

Is Core20's OP-TEE FDE broken?

Hello there, I am debugging on why my encrypted volumes is not being decrypted, with dm-mapper bugging out at boot trying to decrypt the disk: [ 7.294007] random: systemd-cryptse: uninitialized urandom read (4 bytes read) [ 7.391692] device-mapper: table: 253:0: crypt: unknown target type [ 7.399494] device-mapper: ioctl: error adding target to table [ 71.652114] random: crng init donek /dev/disk/by-partuuid/f87930c6-04: (press TAB for no echo) When I mount my SDcard to a linux box…

Basically, I’m following ondra’s imx gadget as a template, along with the kernel as well.