bitlocker mount problem

Message

#1 Post by **Magister** » Tue Jul 29, 2025 12:50 pm

I have a ntfs bitlocker partition on /dev/sda2, I was able to mount it using a simple script at startup:

PARTUUID=950a12c9-a21c-474b-8c79-8193c27919bb ; printf $(secret-tool lookup gvfs-luks-partuuid $PARTUUID) | gio mount -d $(readlink /dev/disk/by-partuuid/$PARTUUID)

where the recovery key was set in seahorse.

It has work for years.

I needed to resize some partition, I booted in windows, disabled bitlocker, boot with gparted, resize partition, boot back to windows, enable bitlocker and wait for 100% completion.

Go back to linux, and I cannot mount partition with gio nor with Thunar, it always fail with:

Error unlocking /dev/sda2 Failed to load device's parameters: Invalid argument

I installed dislocker and I was able to mount it.

Why the mount/Thunar not working anymore? Did Windows changed something in the last year or so on bitlocker algorithm that make mount/Thunar not able to mount bitlocker anymore?

Code: Select all

System:
  Kernel: 6.12.35+1-amd64 arch: x86_64 bits: 64 compiler: gcc v: 12.2.0 clocksource: tsc
    avail: hpet,acpi_pm parameters: BOOT_IMAGE=/vmlinuz-6.12.35+1-amd64 root=UUID=<filter> ro
    rootflags=subvol=@ quiet splash clocksource=tsc tsc=reliable
  Desktop: Xfce v: 4.20.0 tk: Gtk v: 3.24.38 wm: xfwm4 v: 4.20.0 with: xfce4-panel
    tools: xscreensaver,xscreensaver-systemd vt: 7 dm: LightDM v: 1.32.0 Distro: MX-23.6_ahs_x64
    Libretto July 31 2023 base: Debian GNU/Linux 12 (bookworm)
Machine:
  Type: Mini-pc System: AZW product: SER v: N/A serial: <superuser required> Chassis: type: 35
    serial: <superuser required>
  Mobo: AZW model: SER v: V01 serial: <superuser required> part-nu: SER
    uuid: <superuser required> UEFI: American Megatrends LLC. v: 1.16_P4C7M43_Blink date: 01/07/2023
Battery:
  Device-1: hid-d8:ab:24:63:e7:77-battery model: TrackPoint Keyboard II serial: N/A charge: N/A
    status: N/A
CPU:
  Info: model: AMD Ryzen 5 5600H with Radeon Graphics bits: 64 type: MT MCP arch: Zen 3 gen: 3
    level: v3 note: check built: 2021-22 process: TSMC n7 (7nm) family: 0x19 (25) model-id: 0x50 (80)
    stepping: 0 microcode: 0xA500011
  Topology: cpus: 1x dies: 1 clusters: 1 cores: 6 threads: 12 tpc: 2 smt: enabled cache:
    L1: 384 KiB desc: d-6x32 KiB; i-6x32 KiB L2: 3 MiB desc: 6x512 KiB L3: 16 MiB desc: 1x16 MiB
  Speed (MHz): avg: 400 min/max: 400/4280 boost: enabled scaling: driver: amd-pstate-epp
    governor: powersave cores: 1: 400 2: 400 3: 400 4: 400 5: 400 6: 400 7: 400 8: 400 9: 400 10: 400
    11: 400 12: 400 bogomips: 79050
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm
  Vulnerabilities:
  Type: gather_data_sampling status: Not affected
  Type: indirect_target_selection status: Not affected
  Type: itlb_multihit status: Not affected
  Type: l1tf status: Not affected
  Type: mds status: Not affected
  Type: meltdown status: Not affected
  Type: mmio_stale_data status: Not affected
  Type: reg_file_data_sampling status: Not affected
  Type: retbleed status: Not affected
  Type: spec_rstack_overflow mitigation: Safe RET
  Type: spec_store_bypass mitigation: Speculative Store Bypass disabled via prctl
  Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer sanitization
  Type: spectre_v2 mitigation: Retpolines; IBPB: conditional; IBRS_FW; STIBP: always-on; RSB
    filling; PBRSB-eIBRS: Not affected; BHI: Not affected
  Type: srbds status: Not affected
  Type: tsx_async_abort status: Not affected
Graphics:
  Device-1: Advanced Micro Devices [AMD/ATI] Cezanne [Radeon Vega Series / Radeon Mobile Series]
    driver: amdgpu v: kernel arch: GCN-5 code: Vega process: GF 14nm built: 2017-20 pcie: gen: 3
    speed: 8 GT/s lanes: 16 link-max: gen: 4 speed: 16 GT/s ports: active: HDMI-A-1
    empty: DP-1,DP-2,HDMI-A-2 bus-ID: 04:00.0 chip-ID: 1002:1638 class-ID: 0300 temp: 49.0 C
  Display: x11 server: X.Org v: 1.21.1.7 compositor: xfwm4 v: 4.20.0 driver: X: loaded: amdgpu
    dri: radeonsi gpu: amdgpu display-ID: :0.0 screens: 1
  Screen-1: 0 s-res: 3840x2160 s-dpi: 96 s-size: 1017x572mm (40.04x22.52")
    s-diag: 1167mm (45.94")
  Monitor-1: HDMI-A-1 mapped: HDMI-A-0 model: Dell S2721QS serial: <filter> built: 2023 res:
    mode: 3840x2160 hz: 60 scale: 100% (1) dpi: 163 gamma: 1.2 size: 597x336mm (23.5x13.23")
    diag: 685mm (27") ratio: 16:9 modes: max: 3840x2160 min: 720x400
  API: EGL v: 1.5 hw: drv: amd radeonsi platforms: device: 0 drv: radeonsi device: 1 drv: swrast
    gbm: drv: kms_swrast surfaceless: drv: radeonsi x11: drv: radeonsi inactive: wayland
  API: OpenGL v: 4.6 vendor: amd mesa v: 25.0.4-1~mx23ahs+1 glx-v: 1.4 es-v: 3.2
    direct-render: yes renderer: AMD Radeon Graphics (radeonsi renoir ACO DRM 3.61 6.12.35+1-amd64)
    device-ID: 1002:1638 memory: 2.93 GiB unified: no
  API: Vulkan v: 1.4.304 layers: 3 device: 0 type: integrated-gpu name: AMD Radeon Graphics
    (RADV RENOIR) driver: mesa radv v: 25.0.4-1~mx23ahs+1 device-ID: 1002:1638 surfaces: xcb,xlib
    device: 1 type: cpu name: llvmpipe (LLVM 15.0.6 256 bits) driver: mesa llvmpipe
    v: 25.0.4-1~mx23ahs+1 (LLVM 15.0.6) device-ID: 10005:0000 surfaces: xcb,xlib
  Info: Tools: api: eglinfo, glxinfo, vulkaninfo de: xfce4-display-settings
    gpu: corectrl,radeontop x11: xdriinfo, xdpyinfo, xprop, xrandr
Audio:
  Device-1: Advanced Micro Devices [AMD/ATI] Renoir Radeon High Definition Audio
    driver: snd_hda_intel v: kernel pcie: gen: 3 speed: 8 GT/s lanes: 16 link-max: gen: 4
    speed: 16 GT/s bus-ID: 04:00.1 chip-ID: 1002:1637 class-ID: 0403
  Device-2: Advanced Micro Devices [AMD] ACP/ACP3X/ACP6x Audio Coprocessor driver: N/A
    alternate: snd_pci_acp3x, snd_rn_pci_acp3x, snd_pci_acp5x, snd_pci_acp6x, snd_acp_pci,
    snd_rpl_pci_acp6x, snd_pci_ps, snd_sof_amd_rembrandt pcie: gen: 3 speed: 8 GT/s lanes: 16
    link-max: gen: 4 speed: 16 GT/s bus-ID: 04:00.5 chip-ID: 1022:15e2 class-ID: 0480
  Device-3: Advanced Micro Devices [AMD] Family 17h/19h/1ah HD Audio vendor: Realtek
    driver: snd_hda_intel v: kernel pcie: gen: 3 speed: 8 GT/s lanes: 16 link-max: gen: 4
    speed: 16 GT/s bus-ID: 04:00.6 chip-ID: 1022:15e3 class-ID: 0403
  API: ALSA v: k6.12.35+1-amd64 status: kernel-api tools: alsactl,alsamixer,amixer
  Server-1: PipeWire v: 1.0.0 status: active with: 1: pipewire-pulse status: active
    2: wireplumber status: active 3: pipewire-alsa type: plugin 4: pw-jack type: plugin
    tools: pactl,pw-cat,pw-cli,wpctl
Network:
  Device-1: Realtek RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet driver: r8169 v: kernel
    pcie: gen: 1 speed: 2.5 GT/s lanes: 1 port: f000 bus-ID: 01:00.0 chip-ID: 10ec:8168
    class-ID: 0200
  IF: eth0 state: up speed: 1000 Mbps duplex: full mac: <filter>
  Device-2: MEDIATEK MT7921K Wi-Fi 6E 80MHz driver: mt7921e v: kernel pcie: gen: 2 speed: 5 GT/s
    lanes: 1 bus-ID: 02:00.0 chip-ID: 14c3:0608 class-ID: 0280
  IF: wlan0 state: down mac: <filter>
  Info: services: NetworkManager,sshd
Bluetooth:
  Device-1: MediaTek Wireless_Device driver: btusb v: 0.8 type: USB rev: 2.1 speed: 480 Mb/s
    lanes: 1 mode: 2.0 bus-ID: 3-3:3 chip-ID: 0e8d:0608 class-ID: e001 serial: <filter>
  Report: hciconfig ID: hci0 rfk-id: 0 state: up address: <filter> bt-v: 5.3 lmp-v: 12
    sub-v: 2505 hci-v: 12 rev: 1511 class-ID: 7c0104
  Info: acl-mtu: 1021:6 sco-mtu: 240:8 link-policy: rswitch sniff link-mode: peripheral accept
    service-classes: rendering, capturing, object transfer, audio, telephony
Drives:
  Local Storage: total: 1.39 TiB used: 45.81 GiB (3.2%)
  SMART Message: Unable to run smartctl. Root privileges required.
  ID-1: /dev/nvme0n1 maj-min: 259:0 vendor: Kingston model: SNVS500G size: 465.76 GiB block-size:
    physical: 512 B logical: 512 B speed: 31.6 Gb/s lanes: 4 tech: SSD serial: <filter>
    fw-rev: S8H40105 temp: 33.9 C scheme: GPT
  ID-2: /dev/sda maj-min: 8:0 vendor: Timetec model: SD09 size: 953.87 GiB block-size:
    physical: 512 B logical: 512 B speed: 6.0 Gb/s tech: SSD serial: <filter> fw-rev: 8B0 scheme: GPT
  ID-3: /dev/sdb maj-min: 8:16 vendor: Verbatim model: TUFF N TINY size: 7.21 GiB block-size:
    physical: 512 B logical: 512 B type: USB rev: 2.0 spd: 480 Mb/s lanes: 1 mode: 2.0 tech: N/A
    serial: <filter> fw-rev: 5.00 scheme: MBR
  SMART Message: Unknown USB bridge. Flash drive/Unsupported enclosure?
Partition:
  ID-1: / raw-size: 225.48 GiB size: 225.48 GiB (100.00%) used: 44.89 GiB (19.9%) fs: btrfs
    dev: /dev/dm-0 maj-min: 253:0 mapped: luks-<filter>
  ID-2: /boot raw-size: 2 GiB size: 1.95 GiB (97.58%) used: 219.8 MiB (11.0%) fs: ext4
    dev: /dev/nvme0n1p5 maj-min: 259:5
  ID-3: /boot/efi raw-size: 100 MiB size: 96 MiB (96.00%) used: 31.6 MiB (32.9%) fs: vfat
    dev: /dev/nvme0n1p1 maj-min: 259:1
  ID-4: /home raw-size: 225.48 GiB size: 225.48 GiB (100.00%) used: 44.89 GiB (19.9%) fs: btrfs
    dev: /dev/dm-0 maj-min: 253:0 mapped: luks-<filter>
  ID-5: /var raw-size: 225.48 GiB size: 225.48 GiB (100.00%) used: 44.89 GiB (19.9%) fs: btrfs
    dev: /dev/dm-0 maj-min: 253:0 mapped: luks-<filter>
Swap:
  Kernel: swappiness: 15 (default 60) cache-pressure: 100 (default) zswap: no
  ID-1: swap-1 type: file size: 5 GiB used: 0 KiB (0.0%) priority: -2 file: /swap/swap
Sensors:
  System Temperatures: cpu: 59.5 C mobo: 44.0 C gpu: amdgpu temp: 49.0 C
  Fan Speeds (rpm): N/A
Repos:
  Packages: 2826 pm: dpkg pkgs: 2821 libs: 1505 tools: apt, apt-get, aptitude, nala, synaptic
    pm: rpm pkgs: 0 pm: flatpak pkgs: 5
  No active apt repos in: /etc/apt/sources.list
  No active apt repos in: /etc/apt/sources.list.d/deadsnakes-ubuntu-ppa-bookworm.list
  Active apt repos in: /etc/apt/sources.list.d/debian-stable-updates.list
    1: deb http://deb.debian.org/debian bookworm-updates main contrib non-free non-free-firmware
  Active apt repos in: /etc/apt/sources.list.d/debian.list
    1: deb http://deb.debian.org/debian bookworm main contrib non-free non-free-firmware
    2: deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
  Active apt repos in: /etc/apt/sources.list.d/mx.list
    1: deb https://mxrepo.com/mx/repo/ bookworm main non-free
    2: deb https://mxrepo.com/mx/repo/ bookworm ahs
  Active apt repos in: /etc/apt/sources.list.d/vscode.sources
    1: deb [arch=amd64,arm64,armhf] https://packages.microsoft.com/repos/code stable main
Info:
  Memory: total: 28 GiB note: est. available: 28.3 GiB used: 2.13 GiB (7.5%)
  Processes: 415 Power: uptime: 1h 15m states: freeze,mem,disk suspend: deep avail: s2idle
    wakeups: 0 hibernate: platform avail: shutdown, reboot, suspend, test_resume image: 11.28 GiB
    services: upowerd,xfce4-power-manager Init: SysVinit v: 3.06 runlevel: 5 default: graphical
    tool: systemctl
  Compilers: gcc: 12.2.0 alt: 11 Client: shell wrapper v: 5.2.15-release inxi: 3.3.37
Boot Mode: UEFI

#2 Post by **Magister** » Tue Jul 29, 2025 1:16 pm

Also, the dislocker in MXPI can decode/mount my /dev/sda2 partition, it failed with the windows OS partition on nvme, I needed to build the latest dislocker from github. It seems Windows is doing new things with bitlocker/encryption and this is why I guess gio/mount/Thunar will need fixes.

#3 Post by **FullScale4Me** » Tue Jul 29, 2025 2:22 pm

Have you verified the PARTUUID is the same post resizing?

#4 Post by **Magister** » Tue Jul 29, 2025 3:17 pm

yes uuid is the same

#5 Post by **DeepDayze** » Tue Jul 29, 2025 11:07 pm

In my honest opinion the best way to resize the bitlocked Windows partition would be with the Windows tools to avoid any bugs that might have crept in gparted and friends. Microsoft most always be updating Bitlocker code, thus there might be changes that aren't readily handled on Linux side.

#6 Post by **Magister** » Wed Jul 30, 2025 7:07 am

Resizing went well, I booted on the MX usb stick and used gparted to resize multiple partitions even my /boot. Problem is MS changed something in bitlocker so I'm using dislocker for the moment, it works

#7 Post by **DeepDayze** » Wed Jul 30, 2025 11:02 am

Magister wrote: Wed Jul 30, 2025 7:07 am Resizing went well, I booted on the MX usb stick and used gparted to resize multiple partitions even my /boot. Problem is MS changed something in bitlocker so I'm using dislocker for the moment, it works

Perhaps change your script that mounts the Bitlocker partition at startup to now call dislocker instead and passing it the key from Seahorse so that you don't have to give the command manually. Going the dislocker route may be your best bet as MS is always changing up bitlocker thus breaking scripts like the one you been using.

#8 Post by **DeepDayze** » Wed Jul 30, 2025 11:09 am

Magister wrote: Tue Jul 29, 2025 1:16 pm Also, the dislocker in MXPI can decode/mount my /dev/sda2 partition, it failed with the windows OS partition on nvme, I needed to build the latest dislocker from github. It seems Windows is doing new things with bitlocker/encryption and this is why I guess gio/mount/Thunar will need fixes.

As for dislocker why not put in a package request for an updated dislocker package?

MX Linux Forum

bitlocker mount problem

bitlocker mount problem

Re: bitlocker mount problem

Re: bitlocker mount problem

Re: bitlocker mount problem

Re: bitlocker mount problem

Re: bitlocker mount problem

Re: bitlocker mount problem

Re: bitlocker mount problem