Virtual Console shows LUKS2 password in plaintext when entering it manually

Hello everyone,

I have just installed F40 with LUKS2 and realized that I can see my LUKS2 password in plain text when entering it manually on the virtual console at system startup.

I have the following setup:

  • fresh F40 Workstation Installation
  • Keyboard: German
  • Timezone: Europe/Berlin
  • Partition: Custom → Automatically created LVM with encrypted data
  • I enter the LUKS2 password manually at system startup

Initially I noticed this on my Thinkpad, but I was also able to reproduce this behavior in a VM under VMware Workstation.

Switching several times between virtual console and plymouth screen with ESC also does not work since F40.

F39 does not show this behavior.

Is this a bug or maybe a feature?

1 Like

f39 entfernt

f40 hinzugefügt

Exactly the same behaviour here, after upgrading from F39

I just tried this in a VM (fresh install) and can reproduce the behaviour…

EDIT: I filed 2276832 – Virtual Console shows LUKS passphrase in plaintext when entering it

2 Likes

this was already reported against plymouth a month ago, see 2271337 – luks password shown in plaintext

(Severity was set to High, and still the bug wasn’t nominated as release blocker…)

3 Likes

Maybe becuase a simple work around is to uninstall/disable plymouth?

OK, solved rebuilding with proposed patch, reinstalling plymouth-core-libs and rebuilding initramfs. Thanks everyone for sharing your thoughts.

(I couldn’t stand seeing my passphrase in plain text :rofl: )

Here is the updated package… FEDORA-2024-87bcb04540 — bugfix update for plymouth — Fedora Updates System

However, just updating the package doesn’t fix the issue. sudo dracut --force was required to rebuild initramfs.

1 Like

I can also confirm that this works now as expected.

Thanks a lot for the quick fix. F40 is a great release :slight_smile: