\/usr\/sbin\/zfs load-key -a<\/code><\/pre>\nbut randomly on some boots, my password is \"incorrect\" and by experimenting I figured out that if I type everything slowly it works almost every time, but if I type it fast it regularly fails.<\/p>\n
I suspect the issue must be somewhere in the realm of keyboard rate not being optimal during the boot sequence. The prompt for the boot drive which is encrypted ext4 has no such issues but it comes at a different stage in the boot sequence (before dataset) and the console looks different.<\/p>\n
I need to experiment with utils such as kbdrate<\/em> to try and fix the problem but the bug is quite bizarre so I needed a practical workaround first.<\/p>\nBecause zfs load-key has invisible input, you have no idea what you are typing and which keys have registered, so I wrapped the whole thing in a bash script to display * for each character.<\/p>\n
This way I can actually see when a key press is missed and can repeat it.<\/p>\n
#!\/bin\/bash \n\nMAX_ATTEMPTS=3 \nattempt=0 \n\nwhile [ "$attempt" -lt "$MAX_ATTEMPTS" ]; do \n\u00a0\u00a0\u00a0printf "ZFS load-key password (attempt $((attempt + 1)) of $MAX_ATTEMPTS): " \n\u00a0\u00a0\u00a0PASSWORD="" \n\n\u00a0\u00a0\u00a0while true; do \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0char=$(dd bs=1 count=1 2>\/dev\/null) \n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0if [ -z "$char" ] || [ "$char" = "$(printf '\\n')" ]; then \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0break \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0fi \n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0printf "*" \n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0PASSWORD="${PASSWORD}${char}" \n\u00a0\u00a0\u00a0done \n\n\u00a0\u00a0\u00a0echo "$PASSWORD" | \/usr\/sbin\/zfs load-key -a \n\n\u00a0\u00a0\u00a0if [ $? -eq 0 ]; then \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0echo "Password accepted. Exiting." \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0exit 0 \n\u00a0\u00a0\u00a0else \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0echo "Incorrect password. Please try again." \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0attempt=$((attempt + 1)) \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sleep 3 \n\u00a0\u00a0\u00a0fi \ndone \n\necho "Maximum attempts reached. Exiting."\n\n<\/code>\r\nI also tried to wrap the prompt with plymouth with no success.\r\nIf I find the will to debug this cursed bug and find the proper solution expect a new blog post in the future.\r\n\r\n\r\n\r\n<\/pre>\n\r\n
\r\n
\r\n
Cen
\r\nGitHub<\/a>
\r\nEurobattle.net<\/a>
\r\nLagabuse.com<\/a>
\r\nBnetdocs<\/a>
\r\n<\/div>\r\n","protected":false},"excerpt":{"rendered":"I have a systemd service which decrypts my ZFS dataset on boot. It essentially runs \/usr\/sbin\/zfs load-key -a but randomly on some boots, my password is \"incorrect\" and by experimenting I figured out that if I type everything slowly it works almost every time, but if I type it fast it regularly fails. I suspect […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,18],"tags":[],"class_list":["post-505","post","type-post","status-publish","format-standard","hentry","category-linux","category-script-magic"],"_links":{"self":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts\/505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=505"}],"version-history":[{"count":3,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts\/505\/revisions"}],"predecessor-version":[{"id":547,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=\/wp\/v2\/posts\/505\/revisions\/547"}],"wp:attachment":[{"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xpam.pl\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}