First off, has anyone else gotten this setup successfully on their device? I followed the below guide, but cannot login when stating up from a cold boot. My guess is that it has something to do with my Home directory being encrypted when the 2FA code is needed. For now, I had to disable the line in \etc\pam.d\common-auth.

Would be happy to get this working, but I figure there may not be many users looking to lock their devices down like this.

Thanks for any help you can provide.

  • Is only your home directory encrypted or is the disk itself too encrypted? – Videonauth Dec 1 '17 at 16:21
  • My home directory is encrypted for a fact (the option on First Run) & I believe the disk is as well: File System: crypt-luks. Should that be unlocked though once I enter the password at boot? Then the rest of the disk is unlocked, except my home directory. I was thinking that if I can place the necessary files //outside// of my home directory, that might be a way to get around the issue of my home folder being encrypted. – v3ritas Dec 2 '17 at 14:59
  • Well I will try at least to come up with a solution as soon I have a bit time :) Just asking, because i plan on setting up a VM for testing around. – Videonauth Dec 2 '17 at 15:01
  • Ah, thanks. I don't want you to have to go to all that trouble though. I was just hoping to come across someone that was already running it. – v3ritas Dec 4 '17 at 0:03
  • Welll I soon will hopefully :)) – Videonauth Dec 4 '17 at 7:32

Your Answer


By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.