Devs, please fix your luks boot decryption

Dear devs,
I have been distro-hopping for years and finally have settled on Manjaro for the last 6 months. My only problem is that full disk decryption takes slightly over a minute to decrypt my HDD.

I have seen various posts in the forums regarding slow decryption at boot.
I have run various distros with FDE and manjaro is the only one that has this issue in more than one system. I am not a computer major so I have no clue what the technical reason is for this. Maybe a GRUB issue.

The following thread could shed some light;

Please fix this as I want Manjaro to good enough to compete with opensuse/ubuntu, etc.

(Thread moved from #newbies to #general-discussion:rants-and-raves.)

In the old days I used to start my computer in the morning, then go cook breakfast and have a couple of cups of coffee and if I was lucky it was almost finished booting by then.

7 Likes

Because you heard this sound?

5 Likes

Relative to old operating systems everything is faster but in comparison to other distros, Manjaro is the slowest here. Just look at threads of this same issue.

Helpful information would include things like
'what is the speed on other distros' ?
'what are your specs?' [ inxi -Fxxxza --no-host ]
'how did you implement/install/configure luks?'

4 Likes

That's quite the blanket statement and one I'd love to see the proof of.

The computer has a lot to do with how slow things run.
If you run an OS with encryption on a potato, sure, gonna suck.

3 Likes

mash potatoes with gravy

3 Likes
System:    Kernel: 5.2.11-1-MANJARO x86_64 bits: 64 compiler: gcc v: 9.1.0 
           parameters: BOOT_IMAGE=/boot/vmlinuz-5.2-x86_64 root=UUID=42066053-c332-4c2f-8123-5ca995c53de8 rw quiet 
           cryptdevice=UUID=66f7ff1f-672a-407a-a814-fcadbfc3efd5:luks-66f7ff1f-672a-407a-a814-fcadbfc3efd5 
           root=/dev/mapper/luks-66f7ff1f-672a-407a-a814-fcadbfc3efd5 
           resume=/dev/mapper/luks-66f7ff1f-672a-407a-a814-fcadbfc3efd5 
           Desktop: Xfce 4.14.1 tk: Gtk 3.24.10 info: xfce4-panel wm: xfwm4 dm: LightDM 1.30.0 Distro: Manjaro Linux 
Machine:   Type: Laptop System: LENOVO product: 20195 v: Lenovo IdeaPad S400 serial: <filter> Chassis: type: 10 
           v: Lenovo IdeaPad S400 serial: <filter> 
           Mobo: LENOVO model: Product Name v: Mainboard version serial: <filter> UEFI: LENOVO v: 6DCN20WW(V1.08) 
           date: 07/25/2012 
CPU:       Topology: Dual Core model: Intel Core i5-3317U bits: 64 type: MT MCP arch: Ivy Bridge family: 6 model-id: 3A (58) 
           stepping: 9 microcode: 21 L2 cache: 3072 KiB 
           flags: avx lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips: 13575 
           Speed: 798 MHz min/max: 800/2600 MHz Core speeds (MHz): 1: 798 2: 798 3: 798 4: 798 
           Vulnerabilities: Type: l1tf mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable 
           Type: mds mitigation: Clear CPU buffers; SMT vulnerable 
           Type: meltdown mitigation: PTI 
           Type: spec_store_bypass mitigation: Speculative Store Bypass disabled via prctl and seccomp 
           Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer sanitization 
           Type: spectre_v2 mitigation: Full generic retpoline, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling 
Graphics:  Device-1: Intel 3rd Gen Core processor Graphics vendor: Lenovo driver: i915 v: kernel bus ID: 00:02.0 
           chip ID: 8086:0166 
           Device-2: Advanced Micro Devices [AMD/ATI] Seymour [Radeon HD 6400M/7400M Series] vendor: Lenovo driver: radeon 
           v: kernel bus ID: 01:00.0 chip ID: 1002:6760 
           Display: x11 server: X.Org 1.20.5 driver: ati,intel,radeon unloaded: modesetting alternate: fbdev,vesa 
           resolution: 1920x1080~60Hz 
           OpenGL: renderer: Mesa DRI Intel Ivybridge Mobile v: 4.2 Mesa 19.1.5 compat-v: 3.0 direct render: Yes 
Audio:     Device-1: Intel 7 Series/C216 Family High Definition Audio vendor: Lenovo driver: snd_hda_intel v: kernel 
           bus ID: 00:1b.0 chip ID: 8086:1e20 
           Sound Server: ALSA v: k5.2.11-1-MANJARO 
Network:   Device-1: Realtek RTL810xE PCI Express Fast Ethernet vendor: Lenovo driver: r8169 v: kernel port: 2000 
           bus ID: 02:00.0 chip ID: 10ec:8136 
           IF: enp2s0 state: down mac: <filter> 
           Device-2: Intel Centrino Wireless-N 2230 driver: iwlwifi v: kernel port: 2000 bus ID: 03:00.0 chip ID: 8086:0888 
           IF: wlp3s0 state: up mac: <filter> 
           IF-ID-1: tun0 state: unknown speed: 10 Mbps duplex: full mac: N/A 
Drives:    Local Storage: total: 465.76 GiB used: 19.52 GiB (4.2%) 
           ID-1: /dev/sda vendor: Seagate model: ST500LT012-9WS142 size: 465.76 GiB block size: physical: 4096 B 
           logical: 512 B speed: 3.0 Gb/s rotation: 5400 rpm serial: <filter> rev: LVM1 scheme: GPT 
Partition: ID-1: / raw size: 465.46 GiB size: 457.16 GiB (98.22%) used: 19.52 GiB (4.3%) fs: ext4 dev: /dev/dm-0 
Sensors:   System Temperatures: cpu: 48.0 C mobo: N/A gpu: radeon temp: 50 C 
           Fan Speeds (RPM): N/A 
Info:      Processes: 188 Uptime: 3m Memory: 3.75 GiB used: 1.22 GiB (32.4%) Init: systemd v: 242 Compilers: gcc: 9.1.0 
           Shell: bash v: 5.0.9 running in: xfce4-terminal inxi: 3.0.36 

@Sinister @klaude_kraap
Doesn't linux have a reputation of running on older systems?
I am not being hostile towards Manjaro here.

@Sinister
I don't have a camera on me now but it's similar to this;

He fixed the issue by switching his boot to efi which I don't have. But other distros dont have this thing I am facing.

1 Like

@Sinister @klaude_kraap

Take a loot at these two threads

1 Like

sure, it runs on older systems too, but there is a limit, and recently a 64bit only approach for most distros

if your system feels slow, might wanna clean it for dust, also a ram and hdd check should be done, running hdd or ssd as there is a huge huge difference, and where does that decription takes place? in your cpu/gpu, so it dependent on that power, there are many variables here
:slightly_smiling_face:

a workaround: keep your system in suspend mode, most of the time for fast access

2 Likes

From what I saw in the forum threads it has something to do with GRUB but most of the stuff said there goes over my head. I was running mint and solus prior. No issues there...

1 Like

I didn't think you were but I wasn't sure. It can be hard in text sometimes to be positive of the intent of someone's wording.
However titles like "Devs, please fix your....." is not really read in a positive light.

As for older systems? Yes, linux runs well on older systems typically. I'd also mention though, that many "other distros" aren't running bleeding edge versions, hence rolling release model.
Most sit static for years, hence static release model.
Which works great for older systems and servers (As is the case for many of the big distros.)

But honestly, I don't run encryption because I don't see the point and I don't care. I use desktops not laptops. I have a craptop but there isn't encryption on it because I know encryption will slow it down more than it already is because there's a cost. Encryption is heavy workload and it's not worth it on Craptop. This is for my user-case.

4 Likes

Thanks :slight_smile: look at my previous post about the GRUB issue.

2 Likes

Interesting, thanks for the links.

I see that as a Grub issue then and not a manjaro issue.
If grub isn't turning on hardware de-encryption on in time or at all. Sounds like a job for the Grub devs? no?

I don't know though, perhaps some kind of hack or something could get it to work the way it's needed, but I don't see any volunteers. :woman_shrugging:

1 Like

I guess then other distros are not using GRUB to decrypt their boot, which I think Manjaro should also not be doing.

Perhaps try grub-vanilla. It's GRUB without the Manjaro toppings. :cupcake:

3 Likes

You got me there. I have absolutely no idea the boot process with encryption, who does what, when, where and how.

:woman_shrugging:

1 Like

Thanks for the suggestion, will try it later but my post was for the improvement of the default distro without any tinkering.

Forum kindly sponsored by