From c80f515d9a269fb7b04b115fb1643c420a6b7bee Mon Sep 17 00:00:00 2001 From: Hal Emmerich Date: Wed, 9 Oct 2019 01:29:54 -0500 Subject: [PATCH] make cryptosetup fail on missmatched passwords --- scripts/InstallScripts/InstallToInternal.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/InstallScripts/InstallToInternal.sh b/scripts/InstallScripts/InstallToInternal.sh index 5d1b6cf7d..68f33f1bd 100755 --- a/scripts/InstallScripts/InstallToInternal.sh +++ b/scripts/InstallScripts/InstallToInternal.sh @@ -91,8 +91,8 @@ then CRYPTO=true # Since iteration count is based on cpu power, and the rk3288 isn't as fast as a usual # desktop cpu, manually supply -i 15000 for security at the cost of a slightly slower unlock - echo "Now enter the password you would like to use to unlock the encrypted root partition at boot" - cryptsetup -q -y -s 512 luksFormat -i 15000 /dev/$ROOT_DEV_NAME + echo "Now to setup the password you would like to use to unlock the encrypted root partition at boot" + cryptsetup -q -y -s 512 luksFormat -i 15000 /dev/$ROOT_DEV_NAME || exit 1 echo "Now unlock the newly created encrypted root partition so we can mount it and install the filesystem" cryptsetup luksOpen /dev/$ROOT_DEV_NAME luksroot || exit 1 ROOT_DEV_NAME=mapper/luksroot