Your message dated Mon, 22 Oct 2018 16:06:54 +0000
with message-id <[email protected]>
and subject line Bug#907243: fixed in cryptsetup 2:2.0.4-3
has caused the Debian Bug report #907243,
regarding cryptsetup-initramfs recursive resolution broken
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
907243: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907243
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cryptsetup-initramfs
Version: 2:2.0.4-2
Severity: important
Dear Maintainer,
https://salsa.debian.org/cryptsetup-team/cryptsetup/commit/cb5985935713deb6bd4fd45c77d1f54cc28b204b#a630d04e2df57150e6a092fc23f955c6ea0ce412_214_193
is subtly wrong: while 'name' and friends were local variables of
crypttab_print_entry, _CRYPTTAB_NAME and friends are not. For the
/etc/crypttab contents below, this resulted in the initramfs crypttab
contaning two copies of the pf2-zfs line but none of the pf2-swap. A simple
fix is to buffer the output into a local variable, thus:
local STR
STR=$(printf '%s %s %s %s\n' \
"$_CRYPTTAB_NAME" "$_CRYPTTAB_SOURCE" "$_CRYPTTAB_KEY"
"$_CRYPTTAB_OPTIONS")
if [ -n "${CRYPTTAB_OPTION_keyscript+x}" ]; then
copy_exec "$CRYPTTAB_OPTION_keyscript"
fi
if [ "${CRYPTTAB_OPTION_keyscript-}" =
"/lib/cryptsetup/scripts/decrypt_derived" ]; then
# (recursively) list first the device to derive the key from (so
# the boot scripts unlock it first)
crypttab_find_and_print_entry "$CRYPTTAB_KEY"
fi
echo "$STR" >&3
Having just tested, the variant above generates the correct contents in the
initramfs's keytab. Please deploy it or an equivalent change at your
earliest convenience.
Thank you,
--nwf;
-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-4.17.0-3-amd64 root=ZFS=pf2/root ro quiet boot=zfs
luks=no
-- /etc/crypttab
# <target name> <source device> <key file> <options>
pf2-zfs UUID=f9135fb3-c044-4317-9a42-3933e8702511 none
luks,initramfs,discard
pf2-swap UUID=454fadc5-8023-499a-a766-39a92313d241 pf2-zfs
luks,initramfs,discard,keyscript=/lib/cryptsetup/scripts/decrypt_derived
# preserve last line
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable'), (102, 'unstable'), (101,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.17.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cryptsetup-initramfs depends on:
ii busybox 1:1.27.2-3
ii cryptsetup-run 2:2.0.4-2
ii initramfs-tools [linux-initramfs-tool] 0.132
Versions of packages cryptsetup-initramfs recommends:
ii console-setup 1.184
ii kbd 2.0.4-4
cryptsetup-initramfs suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: cryptsetup
Source-Version: 2:2.0.4-3
We believe that the bug you reported is fixed in the latest version of
cryptsetup, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guilhem Moulin <[email protected]> (supplier of updated cryptsetup package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 22 Oct 2018 17:45:35 +0200
Source: cryptsetup
Binary: cryptsetup-run cryptsetup-bin cryptsetup-initramfs cryptsetup
libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb
Architecture: source amd64 all
Version: 2:2.0.4-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Cryptsetup Team
<[email protected]>
Changed-By: Guilhem Moulin <[email protected]>
Description:
cryptsetup - transitional dummy package for cryptsetup-{run,initramfs}
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-initramfs - disk encryption support - initramfs integration
cryptsetup-run - disk encryption support - startup scripts
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup12 - disk encryption support - shared library
libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 906283 907243 908220 911042
Changes:
cryptsetup (2:2.0.4-3) unstable; urgency=medium
.
[ Guilhem Moulin ]
* debian/initramfs/hooks/cryptroot:
+ Make _CRYPTTAB_* variables local to crypttab_find_and_print_entry().
(Closes: #907243.)
+ Silence the warning that honoring CRYPTSETUP="[y|n]" in the config is
deprecated when the variable is set to "y". (Keep the warning when it's
set to "n" though.) Closes: #908220.
* debian/functions: Make get_crypt_type() set variable CRYPTTAB_TYPE to the
type of crypt device ("luks" / "plain" / "tcrypt").
* debian/initramfs/scripts/local-top/cryptroot: Don't complain that
(successful) unlocking of a LUKS device doesn't yield a known file system.
The check is preserved for plain dm-crypt devices and tcrypt devices.
(Closes: #906283.)
* debian/control: Bump Standards-Version to 4.2.1 (no changes necessary).
* debian/doc/crypttab.xml: Improve formatting.
* debian/cryptsetup-run.lintian-overrides: Remove unused override
init.d-script-possible-missing-stop (x2).
* debian/libcryptsetup12.symbols: Add "Build-Depends-Package:
libcryptsetup-dev" field.
.
[ Helmut Grohne ]
* Fix FTCBFS: Supply $(CC) from dpkg's buildtools.mk. (Closes: #911042)
.
[ Dimitri John Ledkov ]
* Implement support for `cryptsetup --sector-size` in crypttab(5).
LP: #1776626.
Checksums-Sha1:
3780266303407f5d91c4c3d842ea7fdc290e9ff4 2814 cryptsetup_2.0.4-3.dsc
de57c15f522970cd0466c8d890faa6e340d233bb 98988 cryptsetup_2.0.4-3.debian.tar.xz
0d59fe7fe9cf4c9b48ef5a069013957ad6268c51 247948
cryptsetup-bin-dbgsym_2.0.4-3_amd64.deb
9e77a71ad041c25cdd97f655df2fbd7ce135cc71 267092
cryptsetup-bin_2.0.4-3_amd64.deb
32cbfc5fc0aff72767ca37e66ccfb900a5435823 66008
cryptsetup-initramfs_2.0.4-3_all.deb
047ffda32f277341c21ccd544484947688fdb326 19380
cryptsetup-run-dbgsym_2.0.4-3_amd64.deb
cdcf4b894f1898b022b2d39ca41aa27cf4d4e12e 183184
cryptsetup-run_2.0.4-3_amd64.deb
e024bc7cd6d1dd6fe341b62cb7a64401bef8c235 51856
cryptsetup-udeb_2.0.4-3_amd64.udeb
55e1268ababde8d6d4e83a9be75cdbf084548e61 48680 cryptsetup_2.0.4-3_all.deb
350c63817a91e4f855ec9754b58c1e689d25de59 9268
cryptsetup_2.0.4-3_amd64.buildinfo
fc522fc1825fb8abffec92d7b63dbd5b93afa521 64228
libcryptsetup-dev_2.0.4-3_amd64.deb
0c29e502a2fb7e72b6b9844969d3d04fdacde71b 412468
libcryptsetup12-dbgsym_2.0.4-3_amd64.deb
b7ec50dbc483afe93ac6f6fa9f4b27daa89ae70d 131796
libcryptsetup12-udeb_2.0.4-3_amd64.udeb
1890107274b06dea304aaf8fd7d72eaa945cda98 179488
libcryptsetup12_2.0.4-3_amd64.deb
Checksums-Sha256:
34a87f6a72b08919fa4e2028424a5fc9941752c6eacd0af7ee85402b69975555 2814
cryptsetup_2.0.4-3.dsc
eb8e4d0d6d0c977e3c0c33133f3a9053c1aca05f3a5b4636a13b0f831a3c1283 98988
cryptsetup_2.0.4-3.debian.tar.xz
6c057c5b73c686c1fc8fcc3643f4f5454848915f18e5f8ccd37863d6d0cba6f5 247948
cryptsetup-bin-dbgsym_2.0.4-3_amd64.deb
f83129ffb5444c85ae4d157116e2f0e8d3e0d55b5d03914ae626968df1d1ab61 267092
cryptsetup-bin_2.0.4-3_amd64.deb
ee5366da1e8fb5c7bc390478d22a4386d2a7c262a5c1fe77f252428d8c595401 66008
cryptsetup-initramfs_2.0.4-3_all.deb
2a67f2139a5f345afa8949f00698f5beeb46f4178d79a42ba8c66812582a5458 19380
cryptsetup-run-dbgsym_2.0.4-3_amd64.deb
ffa5a70b7c3ddc5308b5582e30d830792b025e6c7d583648741d223e2aceb820 183184
cryptsetup-run_2.0.4-3_amd64.deb
69357298261231b7d0cf4fe86630cedcc61e7728dfe628c96d992fd7e8f7a731 51856
cryptsetup-udeb_2.0.4-3_amd64.udeb
1391bddeaf910f1d48560aa1b5dbb43c006f5a688c07a9e32961bbaf52c3ea38 48680
cryptsetup_2.0.4-3_all.deb
9056c3cb42b8b17eb69eb2b5f896043a459acbf2b5d166132c75bc9f2c8ed16d 9268
cryptsetup_2.0.4-3_amd64.buildinfo
a89b422840c414e70a885ee6c722a23917c7d7b5c6f71a7c2404bb0763f6cdb1 64228
libcryptsetup-dev_2.0.4-3_amd64.deb
7aa4f42a65de43381567b1d431eff343b32a07ade544353cb2d0c075a5b9add0 412468
libcryptsetup12-dbgsym_2.0.4-3_amd64.deb
37f236594ca7d7c77213358867a8ca77e5a2bde268c9c2d3097dca7113de7958 131796
libcryptsetup12-udeb_2.0.4-3_amd64.udeb
74fdc4be1b2f15ef2df2e3096cdea772b8c09079f72fc8ae9955f4671e09def0 179488
libcryptsetup12_2.0.4-3_amd64.deb
Files:
50848926e9e62bb37daaea8d28639f85 2814 admin optional cryptsetup_2.0.4-3.dsc
32cbb94f47fd3b26a0a02fc2b03f0db5 98988 admin optional
cryptsetup_2.0.4-3.debian.tar.xz
f7ae309677dad5abf87d4b71ae425a6b 247948 debug optional
cryptsetup-bin-dbgsym_2.0.4-3_amd64.deb
3528428d4f0115d71340169397ea153f 267092 admin optional
cryptsetup-bin_2.0.4-3_amd64.deb
924a7dec4259da0d25b1e677a888e6cb 66008 admin optional
cryptsetup-initramfs_2.0.4-3_all.deb
e621c8f2167e516dcc9a5f8ed857c441 19380 debug optional
cryptsetup-run-dbgsym_2.0.4-3_amd64.deb
c2f3129bfca655f559b85a4f5902ebe1 183184 admin optional
cryptsetup-run_2.0.4-3_amd64.deb
cd611cfa8ea470cc53ea0b052058bc0b 51856 debian-installer optional
cryptsetup-udeb_2.0.4-3_amd64.udeb
29426eeb105846f88f50df145d9d2f25 48680 oldlibs optional
cryptsetup_2.0.4-3_all.deb
270b4a15507f8a92286a2d9a5dca02ee 9268 admin optional
cryptsetup_2.0.4-3_amd64.buildinfo
65f8119a81048b810e2650cf20cfcecd 64228 libdevel optional
libcryptsetup-dev_2.0.4-3_amd64.deb
1754852031c0c7cfb7b0c431db83d875 412468 debug optional
libcryptsetup12-dbgsym_2.0.4-3_amd64.deb
7e3bf9271f48f2d1802ebfbffc50ab6c 131796 debian-installer optional
libcryptsetup12-udeb_2.0.4-3_amd64.udeb
0ddf0c37077da52798dab99156dc429a 179488 libs optional
libcryptsetup12_2.0.4-3_amd64.deb
-----BEGIN PGP SIGNATURE-----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=SNby
-----END PGP SIGNATURE-----
--- End Message ---
