Your message dated Fri, 15 May 2026 07:50:09 +0000
with message-id <[email protected]>
and subject line Bug#1135245: fixed in clevis 23-1
has caused the Debian Bug report #1135245,
regarding clevis-dracut: upstream looks for pkcs11 files in locations for other
distributions
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1135245: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135245
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: clevis-dracut
Version: 22-1
Severity: grave
Tags: patch upstream
Justification: renders package unusable
X-Debbugs-Cc: [email protected]
Dear Maintainer,
src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in lists these
locations:
/usr/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so
/usr/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist
/usr/lib64/opensc-pkcs11.so
/usr/lib64/pkcs11/opensc-pkcs11.so
/usr/lib64/libopensc.so*
/etc/opensc.conf
/usr/lib64/ossl-modules/legacy.so
/lib64/libpcsclite.so.1
while debian keeps them in these locations:
/usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so (1)
/usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist (1)
@libdir@/opensc-pkcs11.so (2)
@libdir@/pkcs11/opensc-pkcs11.so (2)
@libdir@/libopensc.so* (2)
/etc/opensc/opensc.conf (3)
@libdir@/ossl-modules/legacy.so (4)
@libdir@/libpcsclite.so.1 (5)
(1) libccid
(2) opensc-pkcs11
(3) opensc
(4) openssl-provider-legacy
(5) libpcsclite1
dracut failed to execute, due to the missing files.
The attached patch fixes the issue.
-- System Information:
Debian Release: forky/sid
APT prefers testing
APT policy: (600, 'testing'), (600, 'stable'), (500, 'stable-
updates'), (500, 'stable-security'), (400, 'unstable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.19.13+deb14-amd64 (SMP w/20 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_USER,
TAINT_OOT_MODULE
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8),
LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages clevis-dracut depends on:
ii clevis-systemd 22-1
ii dracut-core 110-12
ii dracut-network 110-12
clevis-dracut recommends no packages.
clevis-dracut suggests no packages.
-- no debconf information
--- a/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in 2026-03-16 12:00:03.000000000 -0300
+++ b/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in 2026-04-29 14:04:33.551137708 -0300
@@ -43,14 +43,14 @@
socat \
tail \
tr \
- /usr/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so \
- /usr/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist \
- /usr/lib64/opensc-pkcs11.so \
- /usr/lib64/pkcs11/opensc-pkcs11.so \
- /usr/lib64/libopensc.so* \
- /etc/opensc.conf \
- /usr/lib64/ossl-modules/legacy.so \
- /lib64/libpcsclite.so.1 \
+ /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so \
+ /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist \
+ @libdir@/opensc-pkcs11.so \
+ @libdir@/pkcs11/opensc-pkcs11.so \
+ @libdir@/libopensc.so* \
+ /etc/opensc/opensc.conf \
+ @libdir@/ossl-modules/legacy.so \
+ @libdir@/libpcsclite.so.1 \
@libexecdir@/clevis-luks-pkcs11-askpass \
@libexecdir@/clevis-luks-pkcs11-askpin \
clevis-luks-common-functions \
--- a/meson.build 2026-04-30 01:00:36.000000000 -0300
+++ b/meson.build 2026-04-30 01:02:15.293498033 -0300
@@ -3,11 +3,13 @@
default_options: 'c_std=c99'
)
+libdir = join_paths(get_option('prefix'), get_option('libdir'))
libexecdir = join_paths(get_option('prefix'), get_option('libexecdir'))
sysconfdir = join_paths(get_option('prefix'), get_option('sysconfdir'))
bindir = join_paths(get_option('prefix'), get_option('bindir'))
data = configuration_data()
+data.set('libdir', libdir)
data.set('libexecdir', libexecdir)
data.set('sysconfdir', sysconfdir)
data.set('bindir', bindir)
--- End Message ---
--- Begin Message ---
Source: clevis
Source-Version: 23-1
Done: Christoph Biedl <[email protected]>
We believe that the bug you reported is fixed in the latest version of
clevis, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christoph Biedl <[email protected]> (supplier of updated clevis
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 May 2026 17:58:55 +0200
Source: clevis
Architecture: source
Version: 23-1
Distribution: unstable
Urgency: medium
Maintainer: Christoph Biedl <[email protected]>
Changed-By: Christoph Biedl <[email protected]>
Closes: 1135245
Changes:
clevis (23-1) unstable; urgency=medium
.
* New upstream version 23
* Adjust installation paths for pkcs11-related files. Closes: #1135245
Checksums-Sha1:
6e6cd107fcff9c35c5c347d526cb22b5790ad19c 2633 clevis_23-1.dsc
33e753809c7f5546f8ed89f91a6572b17c77edc7 137154 clevis_23.orig.tar.gz
ad9a7545a55c854f04bffb8c7ff7cb4b7bf0b8d8 7896 clevis_23-1.debian.tar.xz
f72cfab67ae260bcb132e9b939c7318fa3f537b9 13552 clevis_23-1_powerpc.buildinfo
Checksums-Sha256:
def5f733e57e2d19149caecc1f402ff808fc7597e160efc80a4381bc57af3725 2633
clevis_23-1.dsc
4f698b62dc725a852e9e0d94f288d16175247e469ccb83b81bbd3e4e480666ec 137154
clevis_23.orig.tar.gz
d0425dd5cb2bc084811dbc20a6f218ebae1347d7ee2b89b5f9070fc4d8b0d348 7896
clevis_23-1.debian.tar.xz
4f19e5f2e69ad9e9a6f27d9b32ab187cf927e4276fa3c4d8893dbd41e0801fb9 13552
clevis_23-1_powerpc.buildinfo
Files:
8bdf6213bdc1d8bbb2cde780d301b4e8 2633 net optional clevis_23-1.dsc
d250ff8341fd1496505aade2cc5092dd 137154 net optional clevis_23.orig.tar.gz
8d18c8daf63a78580c65897e8d983135 7896 net optional clevis_23-1.debian.tar.xz
26aef61eb9138c0d57392898ea5408ac 13552 net optional
clevis_23-1_powerpc.buildinfo
-----BEGIN PGP SIGNATURE-----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=LVto
-----END PGP SIGNATURE-----
pgph7Nv0XEYyt.pgp
Description: PGP signature
--- End Message ---
