fedora-iot

#30 Encrypted installs of IoT do not show passphrase prompt at boot (but blindly typing passphrase works)
Closed: fixed by pbrobinson. Opened by adamwill.

Closed: fixed
Reopen Issue

If you do an encrypted install of a current IoT 33 compose - e.g. https://kojipkgs.fedoraproject.org/compose/iot/Fedora-IoT-33-20200702.0/compose/IoT/x86_64/iso/Fedora-IoT-IoT-ostree-x86_64-33-20200702.0.iso - when you boot, you see a screen like this:

screenshot

which does not indicate at all that you should type the passphrase. But actually, if you go ahead and type it, it appears masked (with asterisks) and when you hit enter, decryption happens and boot proceeds.

So it's not a showstopper, but it is broken and confusing.

Yes, I had seen that. It completely used to work. Thanks for actually reporting it.

The dialog is still there, it just gets buried in the NetworkManager messages and not visible on screen of a vm. On hardware/serial console you can see it:

...
[ 36.089478] NetworkManager[780]: [1592483020.4937] manager[0xaaaac5198070]: monitoring kernel firmware directory '/lib/firmware'.
[ 36.102329] NetworkManager[780]: [1592483020.4945] hostname: hostname: hostnamed not used as proxy creation failed with: Could not connect: No such file or directory
[ 36.118428] NetworkManager[780]: [1592483020.4955] dns-mgr[0xaaaac51912c0]: init: dns=default,systemd-resolved rc-manager=symlink
[ 36.131533] NetworkManager[780]: [1592483020.4994] manager[0xaaaac5198070]: rfkill: Wi-Fi hardware radio set enabled
[ 36.143132] NetworkManager[780]: [1592483020.4996] manager[0xaaaac5198070]: rfkill: WWAN hardware radio set enabled
Please enter passphrase for disk A[ 36.155387] NetworkManager[780]: [1592483020.5006] manager: rfkill: Wi-Fi enabled by radio killswitch; enabled by state file
DATA_SX900 (luks-cf6ade2c-91ec-4[ 36.170318] NetworkManager[780]: [1592483020.5007] manager: rfkill: WWAN enabled by radio killswitch; enabled by state file
97a-8d54-6acc2cb50a53): 36.184852] NetworkManager[780]: [1592483020.5008] manager: Networking is enabled by state file
;245m(press TAB for no echo) 36.196998] NetworkManager[780]: [1592483020.5010]
...

Is plymouth left out of IoT image builds? if you do a minimal encrypted install from the everything netinst ISO, it looks from the video like you get plymouth, without a graphical theme, so you only see the decryption prompt, no other messages.

Is plymouth left out of IoT image builds? if you do a minimal encrypted install from the everything netinst ISO, it looks from the video like you get plymouth, without a graphical theme, so you only see the decryption prompt, no other messages.

The video is not available anymore, but in any case, I guess if we specify quiet in the boot options we will get only the decryption prompt, no, without the extra messages? Perhaps that systemd-cryptsetup warning would also show up.

Metadata Update from @pbrobinson:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.