libyal/libfvde

Unable to retrieve last logical volume descriptor

Opened this issue · 3 comments

jthomme1 commented

Hello,
I am trying to use your tool to access a FileVault2 partition.

I have the EncryptedRoot.plist.wipekey as well as the password.

But when trying to access the volume from Linux, I get the following:

$: sudo fvdemount -v -e EncryptedRoot.plist.wipekey -p redacted /dev/sdc2 /mnt/tmp
fvdemount 20231029

Unable to open: /dev/sdc2.
libfvde_encrypted_metadata_read_type_0x0305: unable to retrieve last logical volume descriptor.
libfvde_encrypted_metadata_read_from_file_io_handle: unable to read metadata block type 0x0305.
libfvde_internal_volume_open_read: unable to read encrypted metadata 1.
libfvde_volume_open_physical_volume_files_file_io_pool: unable to read physical volume files from file IO pool.
mount_handle_open: unable to open physical volume files.

Do you have any clue what could be the problem?

I am thankful for any hints.

joachimmetz commented

The format is not fully know this might be unsupported format cases, can you provide debug output? See https://github.com/libyal/libfvde/wiki/Troubleshooting#verbose-and-debug-output

  • 👍1
jthomme1 commented

Here is the debug output. Let me know if I can do anything to help you.
stderr.txt
Thanks in advance for your time and effort.

  • 👍1
zzggbb commented

I'm having the identical problem of @jthomme1:

$ sudo fvdemount -e EncryptedRoot.plist.wipekey -p REDACTED /dev/sde2 /mnt/fuse
fvdemount 20231128

libfvde_encrypted_metadata_read_type_0x0305: unable to retrieve last logical volume descriptor.
libfvde_encrypted_metadata_read_from_file_io_handle: unable to read metadata block type 0x0305.
libfvde_internal_volume_open_read: unable to read encrypted metadata 1.
libfvde_internal_volume_open_read: unable to read physical volume files from file IO pool.
Unable to open: /dev/sde2.
libfvde_encrypted_metadata_read_type_0x0305: unable to retrieve last logical volume descriptor.
libfvde_encrypted_metadata_read_from_file_io_handle: unable to read metadata block type 0x0305.
libfvde_internal_volume_open_read: unable to read encrypted metadata 1.
libfvde_volume_open_physical_volume_files_file_io_pool: unable to read physical volume files from file IO pool.
mount_handle_open: unable to open physical volume files.

Here is my debug output:
output.txt