Hm?  Installing cryptsetup-initramfs, and letting it unlock devices
(incl.  those holding the root FS) at early boot stage, definitely
doesn't prevent rescue mode or getting an initramfs shell.

I mean that the Debian installer after some rounds of getter a rescue chroot to debug this bug did start not finding "sda_crypt" and then the boot was falling into a shell and the system not booting. At this point I re-installed the full system. Because clearly there was an open and mounted /dev/mapper/sda_crypt

Anyway, it's off topic I think ^^

What are you trying to do by the way?  Are you installing
dropbear-initramfs on that machine not because you *need* to get a
remote initramfs shell in order to boot, but to have a way to remotely
access access the machine should something break at early boot stage?

On this machine, I was planning to do the same config that works perfectly on my RaspberryPi to remote SSH unlock the disk. But on this machine (it has two ethernet ports) It does not work and I have only bugs.
For now I have a screen so I can unlock the disk with a keyboard.

Nope.  The /usr/bin/ipconfig binary from the initramfs image comes from
/usr/lib/klibc/bin/ipconfig which dropbear-initramfs indirectly has a
hard Depends: on…

Well maybe, but clearly this is not the hole truth I bet. Right after boot&unlock and (user login?) it prints the missing ipconfig missing message.
So the script is also called out of initramfs.

Anyway, the ‘/run/net-*.conf’ glob and the ipconfig call both come
initramfs-tools' configure_networking().  As I wrote before if these
fail it's most likely because there is nothing blocking at initramfs
stage, so execution is handed over to init(1) before
configure_networking() has a chance to terminate (it runs in the
background).  This, again, smells like #1015810.


I have to dig on this aspect. Different that for the RaspberryPi setup, this machine has nothing hooked to it's ethernet ports.


For the record, this is my RaspberryPi setup:

/etc/dropbear/initramfs/dropbear.conf

DROPBEAR_OPTIONS="-I 180 -j -k -p 2222 -s"

/etc/initramfs-tools/initramfs.conf

IP=192.168.4.45::192.168.4.1:255.255.255.0:rpi:eth0:off

Reply via email to