On Sat, 2024-03-09 at 16:06 -0600, bigops wrote: > The crypttab which is part of the cryptsetup package in its man page > does not include the option _netdev. _netdev is required for > unlocking Luks volumes via Clevis/Tang. > > Confirmed that the block device is not unlocked without this option > in the crypttab even though it is not documented. The manpages in > freedesktop.org has this option (_netdev) > documented > (https://www.freedesktop.org/software/systemd/man/latest/crypttab.htm > l)
That's because it's from systemd's crypttab, which is a latter development that is in incompatible but uses the same filename. crypttab(5) manpage already contains a reference on that: > ON DIFFERENT CRYPTTAB FORMATS > Please note that there are several independent cryptsetup wrappers with > their own crypttab format. This manpage covers Debian's implementation > for initramfs scripts and SysVinit init scripts. systemd brings its own > crypttab implementation. We try to cover the differences between the > systemd and our implementation in this manpage, but if in doubt, better > check the systemd crypttab(5) manpage, e.g. online at > https://www.freedesktop.org/software/systemd/man/crypttab.html. Cheers, Chris.
