Search code examples
linuxencryptionlinux-kernelbootgrub

undocumented kernel boot parameter?


It seems that the Linux kernel has a cryptopts=... boot parameter which allows to specify an encrypted root partition. Google search returns many examples of its use, however I was unable to locate the actual documentation. For example, man bootparam does not mention it. I wonder if this is an undocumented feature, or perhaps deprecated? Or maybe it is special to certain distributions? I have even tried to grep the Linux kernel source for the string cryptopts but found nothing... Please help me to solve the mystery!


Solution

  • The kernel doesn't. The string cryptopts does not appear anywhere in the Linux kernel.

    However, the contents of the kernel command line are exposed to userspace in /proc/cmdline. Many distributions will read boot options from the command line — for instance, Debian and Ubuntu use quiet to suppress status messages at boot time. It's likely that cryptopts is used similarly.