Cryptsetup Kernel Modules

[Fitz Mutch]

If nothing else works, give this kernel config a try. It makes all the crypto mostly built-in to the kernel, no modules.
https://github.com/blackfuel/asuswr...rc-rt-5.02hnd/kernel/linux-4.1/config_base.6a

 

[vzhilov]

Might want to put it back, for this settings.
CONFIG_CRYPTO_GF128MUL=y
CONFIG_CRYPTO_SHA256=y

Ok, I did that. Then re-compiled the source and upgraded the router with the new image. Unfortunatelly still getting the same error on mount. I still was not able to modprobe gf128mul and modprobe sha256_generic, but I gues it is fine since we included those in the kernel by CONFIG_CRYPTO_GF128MUL=y and CONFIG_CRYPTO_SHA256=y. However I don't see those in the list with modprobe -l | grep sha or modprobe -l | grep 128

Can the bolded warning during the format be related to that?

admin@RT-AC86U-C828:/tmp/home/root# mkfs.ext3 -j /dev/mapper/crypted5
mke2fs 1.43.7 (16-Oct-2017)
Creating filesystem with 490559 4k blocks and 122640 inodes
Filesystem UUID: b3b99bb0-ddfe-49a2-a607-d40825606402
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912

Allocating group tables: done
Writing inode tables: done
Creating journal (8192 blocks): done
Writing superblocks and filesystem accounting information:
Warning, had trouble writing out superblocks.
admin@RT-AC86U-C828:/tmp/home/root# mount /dev/mapper/crypted5 /mnt/crypted/
mount: mounting /dev/mapper/crypted5 on /mnt/crypted/ failed: Invalid argument​

 

[Fitz Mutch]

... still getting the same error on mount.

Soon I will test this on my own RT-AC86U, which I must repair first because it previously suffered a bad firmware flash.

 

[vzhilov]

If nothing else works, give this kernel config a try. It makes all the crypto mostly built-in to the kernel, no modules.
https://github.com/blackfuel/asuswr...rc-rt-5.02hnd/kernel/linux-4.1/config_base.6a

Ok, just tried that, still same mount error.

Soon I will test this on my own RT-AC86U, which I must repair first because it previously suffered a bad firmware flash.

Do you think it worth trying, would such a set up be able to serve as a file server for something like 5-10 workstations? I heard on previous routers it was slow.

 

[Fitz Mutch]

Do you think it worth trying, would such a set up be able to serve as a file server for something like 5-10 workstations? I heard on previous routers it was slow.

I'm using an RT-AC68U + encrypted disk + encrypted swap, and it's usable for 1-2 people.

 

[vzhilov]

Soon I will test this on my own RT-AC86U, which I must repair first because it previously suffered a bad firmware flash.

Did you get any chance to test it yet?

 

[Fitz Mutch]

Did you get any chance to test it yet?

Not yet, I need to put a new flash chip in my RT-AC86U.

 

[chavo]

i have the same problem
insmod: can't insert 'dm-mod.ko': unknown symbol in module, or unknown parameter

for fix you need patch Makefile
~/asuswrt-merlin.ng/release/src-rt-5.02hnd/kernel/linux-4.1/drivers/md/Makefile
and
add in config
CONFIG_BLK_DEV_DM_BUILTIN=y

--- a/drivers/md/Makefile 2015-01-20 10:38:04.415713013 -0500
+++ b/drivers/md/Makefile 2015-01-20 10:42:28.386283490 -0500
@@ -3,7 +3,8 @@
#

dm-mod-y += dm.o dm-table.o dm-target.o dm-linear.o dm-stripe.o \
- dm-ioctl.o dm-io.o dm-kcopyd.o dm-sysfs.o dm-stats.o
+ dm-ioctl.o dm-io.o dm-kcopyd.o dm-sysfs.o dm-stats.o \
+ dm-builtin.o
dm-multipath-y += dm-path-selector.o dm-mpath.o
dm-snapshot-y += dm-snap.o dm-exception-store.o dm-snap-transient.o \
dm-snap-persistent.o

https://dev.archive.openwrt.org/ticket/18792.html