ZFS LOAD-KEY ERROR

[vulg123]

Good morning
Please guys, after enter this sudo zfs load-key rpool/ROOT/ubuntu_uy913x0
I got this output Key load error: Keys must be loaded for encryption root of 'rpool/ROOT/ubuntu_uy913x' (rpool).

Please I dont know how to solve it

Please
Please

[gmelikov]

zfs/lib/libzfs/libzfs_crypto.c

Lines 1323 to 1324 in f7d8b13

	"Keys must be loaded for encryption root of '%s' (%s)."),
	zfs_get_name(zhp), prop_encroot);

you need to load-key on rpool itself, not child dataset.

Offtopic, but it's not the best practice to use root dataset (rpool itself) for anything, next time it's better to encrypt at least at rpool/ROOT level.

[vulg123]

Hello I tried, and they gave me this error

'Key load error: Failed to open key material file: No such file or directory'
That is what I get

[IvanVolosyuk]

It looks like your key location is a file and the file doesn't exist on this system. You should try to find the key and may be change the key location property.

[vulg123]

My question is how to do ? How to find the file?
How to find a key ?

I've tried everything I know, and isn't working

[IvanVolosyuk]

What does the zfs list -o name,encryption,encryptionroot,keylocation,keyformat -r rpool say?

[meonkeys]

I'm getting the same error as @vulg123 .

How might I change the way the 6.x kernel boots? It feels like it has to be some DKMS / initial ramdisk config / script that tells it how to make sure keystore is properly mounted, then prompts me for the password.

@vulg123 , yours is an Ubuntu system, yes? How did you install Ubuntu originally? Did you do any upgrades (say, from 22.04 to 24.04?) Did you originally have a 5.x kernel and are now trying to use a 6.x kernel? Do you have ZFS 2.3.0?

$ zfs list -o name,encryption,encryptionroot,keylocation,keyformat -r rpool
NAME                                              ENCRYPTION   ENCROOT  KEYLOCATION                            KEYFORMAT
rpool                                             aes-256-gcm  rpool    file:///run/keystore/rpool/system.key  raw
rpool/ROOT                                        aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw                          aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/srv                      aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/usr                      aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/usr/local                aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var                      aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/games                aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/lib                  aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/lib/AccountsService  aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/lib/NetworkManager   aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/lib/apt              aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/lib/dpkg             aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/log                  aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/mail                 aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/snap                 aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/spool                aes-256-gcm  rpool    none                                   raw
rpool/ROOT/ubuntu_2bfkjw/var/www                  aes-256-gcm  rpool    none                                   raw
rpool/USERDATA                                    aes-256-gcm  rpool    none                                   raw
rpool/USERDATA/root_mxx4do                        aes-256-gcm  rpool    none                                   raw
rpool/keystore                                    off          -        none                                   none
rpool/var                                         aes-256-gcm  rpool    none                                   raw
rpool/var/lib                                     aes-256-gcm  rpool    none                                   raw
rpool/var/lib/docker                              aes-256-gcm  rpool    none                                   raw

It looks like something changed as far as key handling since I originally installed Ubuntu on this laptop, and now I'm trying to load a kernel that I think System76 created but supports ZFS differently? And I think ZFS itself upgraded along the way. Looks like I have ZFS 2.3.0 now.