Package: cryptsetup-initramfs Version: 2:2.1.0-5+deb10u2 Severity: important Tags: patch
Dear Maintainer, I noticed that LV activation done as part of the provided initramfs scripts disregards the activation/auto_activation_volume_list setting in /etc/lvm/lvm.conf. To fix the issue please consider applying the attached patch. Quoting from man lvchange(8) to explain the change: > ay specifies autoactivation, in which case an LV is activated only if > it matches an item in lvm.conf > activation/auto_activation_volume_list. If the list is not set, all > LVs are considered to match, and if if the list is set but empty, no > LVs match. Autoactivation should be used during system boot to > make it possible to select which LVs should be automatically > activated by the system. See lvmlockd(8) for more information > about activation options ey and sy for shared VGs. Thank you Lukas Schwaighofer
diff --git a/debian/initramfs/scripts/local-top/cryptroot b/debian/initramfs/scripts/local-top/cryptroot
index 1da5ad1f..c348cf7f 100644
--- a/debian/initramfs/scripts/local-top/cryptroot
+++ b/debian/initramfs/scripts/local-top/cryptroot
@@ -189,7 +189,7 @@ setup_mapping() {
return 1
elif vg="$(lvm pvs --noheadings -o vg_name --config 'log{prefix=""}' -- "$dev")"; then
# activate the VG held by the PV we just unlocked
- lvm lvchange -a y --sysinit -- "$vg"
+ lvm lvchange -a ay --sysinit -- "$vg"
fi
fi
pgp6VF67rk7CZ.pgp
Description: OpenPGP digital signature
