Your message dated Fri, 08 Jun 2012 11:22:07 +0200
with message-id <[email protected]>
and subject line Re: [pkg-cryptsetup-devel] Bug#669861: Bug#669861: cryptsetup:
Unable to select correct swap device
has caused the Debian Bug report #669861,
regarding cryptsetup: Unable to select correct swap device
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
669861: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=669861
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cryptsetup
Version: 2:1.4.1-3
Severity: important
Hi,
cryptsetup is unable to select the correct swap device, then is unable to
decrypt the correct drive.
I got this error:
update-initramfs: Generating /boot/initrd.img-3.2.0-2-686-pae
cryptsetup: WARNING: found more than one resume device candidate:
sda3_crypt
81c6f99f-d571-497c-a6db-759f4beb0b2d
But my swap device is:
root@hakata:~# dmesg | grep swap
[ 598.327480] Adding 4198972k swap on /dev/mapper/sda3_crypt. Priority:-1
extents:1 across:4198972k
root@hakata:~# cat /etc/fstab | grep swap
/dev/mapper/sda3_crypt none swap sw 0 0
root@hakata:~#
On the other hand, I don't know where cryptsetup finds
"81c6f99f-d571-497c-a6db-759f4beb0b2d", because my drives are:
root@hakata:~# ls /dev/disk/by-uuid -l
total 0
lrwxrwxrwx 1 root root 10 abr 21 13:33 2b4c0c84-a2ca-499b-81ad-23212b953653 ->
../../dm-0
lrwxrwxrwx 1 root root 10 abr 21 13:41 37b3da30-224d-4068-9174-d6c59269863b ->
../../sda2
lrwxrwxrwx 1 root root 10 abr 21 13:41 9CECBF41ECBF148C -> ../../sda4
lrwxrwxrwx 1 root root 10 abr 21 13:42 b0eba5e3-50f8-4b1a-a0d8-3d8c9e59b61b ->
../../dm-1
lrwxrwxrwx 1 root root 10 abr 21 13:41 d67c66b0-3bf4-4316-8e13-46e8551f292b ->
../../sda1
lrwxrwxrwx 1 root root 10 abr 21 13:42 f3bd4025-a010-48c5-8e3a-237d501aedb1 ->
../../sda3
root@hakata:~#
Then, uswsusp is unable to find /dev/dm-1 and then I cannot load the suspend
image:
root@hakata:~# dmsetup ls
sda2_crypt (254, 0)
sda3_crypt (254, 1)
root@hakata:~#
root@hakata:~# cat /etc/uswsusp.conf | grep dev
resume device = /dev/dm-1
root@hakata:~#
Best regards,
kix
-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/boot/vmlinuz-3.2.0-2-686-pae
root=UUID=d67c66b0-3bf4-4316-8e13-46e8551f292b ro quiet
-- /etc/crypttab
sda2_crypt UUID=37b3da30-224d-4068-9174-d6c59269863b none luks
sda3_crypt UUID=f3bd4025-a010-48c5-8e3a-237d501aedb1 none luks,swap
-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'vol_id --uuid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
proc /proc proc defaults 0 0
# / was on /dev/sda1 during installation
UUID=d67c66b0-3bf4-4316-8e13-46e8551f292b / ext3
errors=remount-ro 0 1
/dev/mapper/sda2_crypt /home ext3 defaults 0 2
/dev/mapper/sda3_crypt none swap sw 0 0
#/dev/scd0 /media/cdrom0 udf,iso9660 user,noauto 0 0
# /dev/sda4 /mnt/win ntfs-3g user,noauto 0 0
UUID=9CECBF41ECBF148C /mnt/win ntfs-3g user,noauto 0 0
-- lsmod
Module Size Used by
hid_logitech_dj 12991 0
usbhid 31523 1 hid_logitech_dj
hid 60120 2 usbhid,hid_logitech_dj
acpi_cpufreq 12807 1
mperf 12421 1 acpi_cpufreq
cpufreq_conservative 12987 0
cpufreq_stats 12762 0
cpufreq_powersave 12422 0
cpufreq_userspace 12520 0
binfmt_misc 12813 1
uinput 12991 1
fuse 52153 1
nfsd 173714 2
nfs 261507 0
nfs_acl 12463 2 nfs,nfsd
auth_rpcgss 32143 2 nfs,nfsd
fscache 31978 1 nfs
lockd 57255 2 nfs,nfsd
sunrpc 143853 6 lockd,auth_rpcgss,nfs_acl,nfs,nfsd
loop 17810 0
snd_hda_codec_realtek 142180 1
snd_hda_intel 21856 0
snd_hda_codec 63477 2 snd_hda_intel,snd_hda_codec_realtek
snd_hwdep 12943 1 snd_hda_codec
snd_pcm_oss 36181 0
snd_mixer_oss 17668 1 snd_pcm_oss
snd_pcm 53390 3 snd_pcm_oss,snd_hda_codec,snd_hda_intel
snd_page_alloc 12867 2 snd_pcm,snd_hda_intel
snd_seq_midi 12744 0
snd_seq_midi_event 13124 1 snd_seq_midi
joydev 17010 0
snd_rawmidi 18376 1 snd_seq_midi
arc4 12418 2
ath9k 67776 0
ath9k_common 12648 1 ath9k
ath9k_hw 311354 2 ath9k_common,ath9k
uvcvideo 56896 0
i915 303459 2
ath 17114 3 ath9k_hw,ath9k_common,ath9k
mac80211 171359 1 ath9k
snd_seq 39487 2 snd_seq_midi_event,snd_seq_midi
cfg80211 117454 3 mac80211,ath,ath9k
videodev 61658 1 uvcvideo
snd_seq_device 13016 3 snd_seq,snd_rawmidi,snd_seq_midi
snd_timer 22356 2 snd_seq,snd_pcm
drm_kms_helper 22699 1 i915
media 13692 2 videodev,uvcvideo
drm 134178 3 drm_kms_helper,i915
iTCO_wdt 16945 0
acer_wmi 21651 0
snd 42691 11
snd_timer,snd_seq_device,snd_seq,snd_rawmidi,snd_pcm,snd_mixer_oss,snd_pcm_oss,snd_hwdep,snd_hda_codec,snd_hda_intel,snd_hda_codec_realtek
sparse_keymap 12680 1 acer_wmi
iTCO_vendor_support 12632 1 iTCO_wdt
evdev 17225 8
rfkill 18516 2 acer_wmi,cfg80211
i2c_algo_bit 12713 1 i915
psmouse 54927 0
i2c_i801 12670 0
ac 12552 0
battery 12957 0
power_supply 13283 2 battery,ac
soundcore 12921 1 snd
wmi 13051 1 acer_wmi
i2c_core 19116 6
i2c_i801,i2c_algo_bit,drm,drm_kms_helper,videodev,i915
video 17412 1 i915
serio_raw 12803 0
processor 27483 1 acpi_cpufreq
button 12817 1 i915
ext3 138190 2
mbcache 12897 1 ext3
jbd 51377 1 ext3
cryptd 14125 0
aes_i586 16608 16
aes_generic 32970 1 aes_i586
xts 12557 8
gf128mul 12922 1 xts
dm_crypt 18039 2
dm_mod 57278 5 dm_crypt
sd_mod 35425 4
crc_t10dif 12332 1 sd_mod
ata_generic 12439 0
ata_piix 21175 3
libata 124981 2 ata_piix,ata_generic
scsi_mod 135194 2 libata,sd_mod
uhci_hcd 22337 0
ehci_hcd 35509 0
fan 12594 0
usbcore 104352 5 ehci_hcd,uhci_hcd,uvcvideo,usbhid
thermal 13103 0
thermal_sys 17752 4 thermal,fan,processor,video
atl1c 31542 0
usb_common 12338 1 usbcore
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 3.2.0-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages cryptsetup depends on:
ii debconf [debconf-2.0] 1.5.42
ii dmsetup 2:1.02.67-2
ii libc6 2.13-27
ii libcryptsetup4 2:1.4.1-2
ii libpopt0 1.16-3
cryptsetup recommends no packages.
Versions of packages cryptsetup suggests:
ii busybox 1:1.19.3-5
ii dosfstools 3.0.12-1
ii initramfs-tools [linux-initramfs-tool] 0.101
ii liblocale-gettext-perl 1.05-7+b1
ii udev 175-3.1
-- debconf information:
cryptsetup/prerm_active_mappings: true
--- End Message ---
--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hey Rodolfo,
no problem, and closing the bug as suggested.
regards,
jonas
Am 08.06.2012 11:13, schrieb Rodolfo kix Garcia:
> Hi Jonas,
>
> I am so sorry! I forget this mail (is in my inbox, but I have a
> lot of mails with "to-to" things).
>
> Please, close this bug. It is solved. I will send the info that you
> request me offlist as soon as possible.
>
> Thanks a lot for your help.
>
> Rodolfo.
>
> El 08.06.2012 10:49, Jonas Meurer escribió: Hey Rodolfo,
>
> any news regarding the questions below? Otherwise I would like to
> close this bugreport.
>
> Regards, jonas
>
> Am 22.04.2012 13:07, schrieb Jonas Meurer:
>>>> Hey Rodolfo,
>>>>
>>>> Am 21.04.2012 17:26, schrieb Rodolfo GarcÃa Peñas:
>>>>> the cryptroot initramfs hook script searches for resume
>>>>> devices in the following files. Please send the content of
>>>>> all of them:
>>>>
>>>>> /etc/uswsusp.conf
>>>>
>>>>>> The important part is:
>>>>
>>>>>> resume device = /dev/dm-1
>>>>
>>>> mh, I've no idea how uswusp detects the resume device, but
>>>> apparently there's something wrong. did you try
>>>> 'dpkg-reconfigure uswsusp' yet? maybe /dev/dm-1 was correct
>>>> in the past, and your setup changed in the meantime?
>>>>
>>>>> /etc/initramfs-tools/conf.d/resume
>>>>
>>>>>> Is here :-)
>>>>
>>>>>> RESUME=UUID=81c6f99f-d571-497c-a6db-759f4beb0b2d
>>>>
>>>> all right, that's the reason why cryptroot initramfs hook
>>>> detects a second resume device. I've a gut feeling that
>>>> something's wrong with your setup.
>>>>
>>>> what's the content of this file after 'dpkg-reconfigure
>>>> initramfs-tools'?
>>>>
>>>> And more importantly: you have 'luks,swap' as options to your
>>>> encrypted swap device in /etc/crypttab, right? The option
>>>> 'swap' results in cryptdisks scripts running 'mkswap' over
>>>> the device on every boot. This is not required and indeed
>>>> wrong for your setup.
>>>>
>>>> In general, you've two options for encrypted swap:
>>>>
>>>> 1/ use a random key (e.g. /dev/urandom) for decryption, and
>>>> recreate the swap partition on every boot. this is what the
>>>> 'swap' option in crypttab(5) is for. it has the advantage of
>>>> more security, but doesn't support resume from this device -
>>>> as there's no consistent encryption key and as a result no
>>>> way to restore the suspend image for resume.
>>>>
>>>> 2/ use a consistent key for decryption. this is required for
>>>> suspend/ resume functions. and this is what you're using.
>>>> in that case you don't need to rerun 'mkswap' over the
>>>> unlocked crypto-swap every time. as a result, the 'swap'
>>>> option to crypttab(5) is not needed in that case.
>>>>
>>>> I suggest that you read sections 8 & 9 of the cryptroot
>>>> initramfs documentation in
>>>> /usr/share/doc/cryptsetup/README.initramfs.gz.
>>>>
>>>> I'm still curious whether there's a real bug in the package,
>>>> or whether this is merely a setup issue on your side. Thus
>>>> it would be great if you could answer my questions above.
>>>>
>>>> Regards, jonas
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> pkg-cryptsetup-devel mailing list
>>>> [email protected]
>>>>
>>>> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-cryptsetup-devel
>>>>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=rZP8
-----END PGP SIGNATURE-----
--- End Message ---
