Your message dated Sat, 07 Jul 2018 01:49:44 +0000
with message-id <e1fbcm4-0001sh...@fasolo.debian.org>
and subject line Bug#902943: fixed in cryptsetup 2:2.0.3-5
has caused the Debian Bug report #902943,
regarding cryptsetup-initramfs: regression: LV holding LUKS device isn't
activated at initramfs stage
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
902943: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902943
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: cryptsetup-initramfs
Version: 2:2.0.3-4
Severity: critical
Justification: breaks the whole system
Dear Maintainer,
After system upgrade the system is not bootable anymore due the
initramfs is unable to find the "source" for the rootfs and boot
hangs.
Before the upgrade this worked seamlessly for a long time, UUID of FS
did not change recently.
When breaking into initramfs (kernel argument 'break'), I am able to
activate the LVM logical volume manually with 'lvm lvchange -a y linux'.
Resuming the boot after that works, i.e. the passphrase is asked and
boot continues after successful decryption.
Please let me know if I should provide more detailed debug
information.
Regards,
doak
-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-4.16.0-2-amd64 root=/dev/mapper/linux-debian_crypt ro quiet
-- /etc/crypttab
linux-debian_crypt UUID=979d71b4-f9a9-45cb-b72e-6c81754ab504 none luks
-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/mapper/linux-debian_crypt / ext4 errors=remount-ro 0
1
# /boot was on /dev/sda5 during installation
UUID=42edef9b-e7dc-4ceb-a5e1-05d958d6ea6f /boot ext4 defaults 0 2
/SWAP none swap defaults 0 0
-- lsmod
Module Size Used by
ctr 16384 6
ccm 20480 9
cmac 16384 0
rfcomm 86016 0
fuse 118784 3
ipt_MASQUERADE 16384 1
nf_nat_masquerade_ipv4 16384 1 ipt_MASQUERADE
nf_conntrack_netlink 49152 0
nfnetlink 16384 2 nf_conntrack_netlink
xfrm_user 45056 1
xfrm_algo 16384 1 xfrm_user
iptable_nat 16384 1
nf_conntrack_ipv4 16384 3
nf_defrag_ipv4 16384 1 nf_conntrack_ipv4
nf_nat_ipv4 16384 1 iptable_nat
xt_addrtype 16384 2
xt_conntrack 16384 1
nf_nat 36864 2 nf_nat_masquerade_ipv4,nf_nat_ipv4
nf_conntrack 151552 7
nf_conntrack_ipv4,ipt_MASQUERADE,nf_conntrack_netlink,nf_nat_masquerade_ipv4,xt_conntrack,nf_nat_ipv4,nf_nat
libcrc32c 16384 2 nf_conntrack,nf_nat
br_netfilter 24576 0
bridge 184320 1 br_netfilter
stp 16384 1 bridge
llc 16384 2 bridge,stp
bnep 24576 2
overlay 102400 0
ebtable_filter 16384 0
ebtables 36864 1 ebtable_filter
devlink 61440 0
ip6table_filter 16384 0
ip6_tables 32768 1 ip6table_filter
iptable_filter 16384 1
snd_hda_codec_hdmi 57344 1
binfmt_misc 20480 1
intel_rapl 24576 0
x86_pkg_temp_thermal 16384 0
intel_powerclamp 16384 0
coretemp 16384 0
kvm_intel 180224 0
uvcvideo 106496 0
arc4 16384 2
kvm 704512 1 kvm_intel
videobuf2_vmalloc 16384 1 uvcvideo
videobuf2_memops 16384 1 videobuf2_vmalloc
videobuf2_v4l2 28672 1 uvcvideo
videobuf2_common 49152 2 uvcvideo,videobuf2_v4l2
irqbypass 16384 1 kvm
iTCO_wdt 16384 0
cdc_mbim 16384 0
wmi_bmof 16384 0
btusb 53248 0
iwlmvm 290816 0
iTCO_vendor_support 16384 1 iTCO_wdt
videodev 204800 3 uvcvideo,videobuf2_common,videobuf2_v4l2
mac80211 802816 1 iwlmvm
cdc_wdm 24576 1 cdc_mbim
btrtl 16384 1 btusb
intel_cstate 16384 0
btbcm 16384 1 btusb
media 45056 2 uvcvideo,videodev
cdc_ncm 40960 1 cdc_mbim
btintel 24576 1 btusb
intel_uncore 131072 0
usbnet 49152 2 cdc_mbim,cdc_ncm
iwlwifi 225280 1 iwlmvm
i915 1650688 20
bluetooth 626688 14 btrtl,btintel,bnep,btbcm,rfcomm,btusb
mii 16384 1 usbnet
cdc_acm 32768 2
intel_rapl_perf 16384 0
evdev 28672 29
joydev 24576 0
snd_hda_codec_realtek 110592 1
serio_raw 16384 0
snd_hda_codec_generic 86016 1 snd_hda_codec_realtek
pcspkr 16384 0
snd_hda_intel 45056 8
drbg 28672 1
ansi_cprng 16384 0
snd_hda_codec 151552 4
snd_hda_intel,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek
ecdh_generic 24576 1 bluetooth
cfg80211 737280 3 iwlmvm,iwlwifi,mac80211
sg 36864 0
rtsx_pci_ms 20480 0
snd_hda_core 94208 5
snd_hda_intel,snd_hda_codec,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek
memstick 16384 1 rtsx_pci_ms
snd_hwdep 20480 1 snd_hda_codec
thinkpad_acpi 98304 1
drm_kms_helper 196608 1 i915
snd_pcm 118784 4
snd_hda_intel,snd_hda_codec,snd_hda_core,snd_hda_codec_hdmi
tpm_tis 16384 0
nvram 16384 1 thinkpad_acpi
tpm_tis_core 20480 1 tpm_tis
snd_timer 36864 1 snd_pcm
wmi 28672 1 wmi_bmof
drm 458752 14 i915,drm_kms_helper
snd 94208 25
snd_hda_intel,snd_hwdep,snd_hda_codec,snd_timer,thinkpad_acpi,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek,snd_pcm
tpm 65536 2 tpm_tis,tpm_tis_core
mei_me 45056 0
battery 20480 0
rfkill 28672 9 bluetooth,thinkpad_acpi,cfg80211
soundcore 16384 1 snd
i2c_algo_bit 16384 1 i915
mei 106496 1 mei_me
rng_core 16384 1 tpm
lpc_ich 28672 0
ac 16384 0
shpchp 40960 0
video 45056 2 thinkpad_acpi,i915
button 16384 1 i915
sunrpc 405504 1
parport_pc 32768 0
ppdev 20480 0
lp 20480 0
parport 57344 3 lp,parport_pc,ppdev
ip_tables 28672 2 iptable_filter,iptable_nat
x_tables 45056 8
ip_tables,ebtables,iptable_filter,ipt_MASQUERADE,ip6table_filter,xt_addrtype,xt_conntrack,ip6_tables
autofs4 49152 2
ext4 720896 2
crc16 16384 2 bluetooth,ext4
mbcache 16384 1 ext4
jbd2 118784 1 ext4
fscrypto 32768 1 ext4
ecb 16384 0
btrfs 1347584 0
crc32c_generic 16384 0
xor 24576 1 btrfs
zstd_decompress 94208 1 btrfs
zstd_compress 188416 1 btrfs
xxhash 16384 2 zstd_compress,zstd_decompress
raid6_pq 122880 1 btrfs
algif_skcipher 16384 0
af_alg 28672 1 algif_skcipher
dm_crypt 40960 1
dm_mod 147456 8 dm_crypt
sd_mod 53248 5
crct10dif_pclmul 16384 0
crc32_pclmul 16384 0
crc32c_intel 24576 4
ghash_clmulni_intel 16384 0
pcbc 16384 0
rtsx_pci_sdmmc 28672 0
mmc_core 172032 1 rtsx_pci_sdmmc
aesni_intel 188416 9
aes_x86_64 20480 1 aesni_intel
crypto_simd 16384 1 aesni_intel
glue_helper 16384 1 aesni_intel
cryptd 28672 4 crypto_simd,ghash_clmulni_intel,aesni_intel
ahci 40960 4
psmouse 172032 0
libahci 40960 1 ahci
xhci_pci 16384 0
ehci_pci 16384 0
libata 278528 2 ahci,libahci
xhci_hcd 258048 1 xhci_pci
ehci_hcd 94208 1 ehci_pci
scsi_mod 253952 3 sd_mod,libata,sg
i2c_i801 28672 0
rtsx_pci 73728 2 rtsx_pci_sdmmc,rtsx_pci_ms
usbcore 290816 11
usbnet,uvcvideo,cdc_mbim,ehci_hcd,cdc_acm,cdc_ncm,cdc_wdm,xhci_pci,btusb,xhci_hcd,ehci_pci
e1000e 282624 0
usb_common 16384 1 usbcore
thermal 20480 0
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (900, 'testing'), (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.16.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cryptsetup-initramfs depends on:
ii busybox 1:1.27.2-2
ii cryptsetup-run 2:2.0.3-4
ii initramfs-tools [linux-initramfs-tool] 0.130
Versions of packages cryptsetup-initramfs recommends:
ii console-setup 1.184
ii kbd 2.0.4-3
cryptsetup-initramfs suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: cryptsetup
Source-Version: 2:2.0.3-5
We believe that the bug you reported is fixed in the latest version of
cryptsetup, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 902...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guilhem Moulin <guil...@debian.org> (supplier of updated cryptsetup package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 07 Jul 2018 01:47:57 +0200
Source: cryptsetup
Binary: cryptsetup-run cryptsetup-bin cryptsetup-initramfs cryptsetup
libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb
Architecture: source amd64 all
Version: 2:2.0.3-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Cryptsetup Team
<pkg-cryptsetup-de...@alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guil...@debian.org>
Description:
cryptsetup - transitional dummy package for cryptsetup-{run,initramfs}
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-initramfs - disk encryption support - initramfs integration
cryptsetup-run - disk encryption support - startup scripts
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup12 - disk encryption support - shared library
libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 902733 902879 902943
Changes:
cryptsetup (2:2.0.3-5) unstable; urgency=medium
.
[ Jonas Meurer ]
* debian/askpass.c, debian/scripts/passdev.c, debian/rules:
+ Drop _BSD_SOURCE in favor of _DEFAULT_SOURCE
+ Drop c99 std, as the default is now higher than that
* debian/control:
+ Drop explicit dependencies on libgcrypt20 and libgpg-error0 from
libcryptsetup12. They're pulled in by ${shlibs:Depends} automatically.
.
[ Guilhem Moulin ]
* debian/initramfs/cryptroot-unlock: Keep looping forever (as long as the
disk is locked) if the CRYPTTAB_OPTION_tries variable is set to 0, cf.
crypttab(5).
* debian/doc/crypttab.xml: Clarify that the 'readonly' flag sets up a
read-only mapping. Cf. `cryptsetup --readonly`.
* debian/initramfs/hooks/cryptroot:
+ Fix generation of initrd crypttab(5) with `update-initramfs -u -v` for
key files matching $KEYFILE_PATTERN, or when a 'keyscript' is specified
in the crypttab options. Regression since 2:2.0.3-2. (Closes: #902733.)
+ Avoid processing entries multiple times in get_crypttab_entry(), which
could happen with 'keyscript=decrypt_derived' for instance.
+ Don't complain that the sysfs dir can't be found when the hook failed to
normalize the device (another warning is shown already).
+ If source device is mapped (for instance if it's a logical volume), put
its dm name into the initrd crypttab. LVM2's local-block script doesn't
work with UUIDs, and giving it a VG+LV is better anyway as we avoid to
activate all volumes at initramfs stage. (Closes: #902943.)
* debian/initramfs/conf-hook: Clarify that if KEYFILE_PATTERN if null or
unset then no key file is copied.
* debian/initramfs/*, debian/functions, debian/cryptdisks-functions:
+ Use major:minor device IDs internally, as this facilitate discovery of
sysfs directories, and we don't have to take care of the udev mangling.
+ Decode octal sequences when reading /etc/crypttab or /etc/fstab. This
means that key files and option values can contain blanks and special
characters encoded as octal sequences.
+ Refactor crypttab(5) parsing logic, to avoid duplication of boilerplate
code.
* debian/functions: If the key file is a symlink, warn about insecure
permissions of the target, not the link itself.
* debian/scripts/decrypt_derived: For devices with keys in the kernel
keyring (e.g., LUKS2 by default), refuse to derive anything.
* debian/patches/disable-internal-tests.patch: Add configure option
'--disable-internal-tests' to disable the internal test suite.
* debian/rules: Don't run upstream's internal test suite if
$DEB_BUILD_OPTIONS contains the string "skip-internal-tests". (Tests are
still run by default.)
* debian/cryptdisks-functions: Restore support for crypttab(5) entries with
regular files as source device. Regression since 2:2.0.3-2.
(Closes: #902879.)
* debian/control: Bump Standards-Version to 4.1.5 (no changes necessary).
Checksums-Sha1:
ff67746a3a5978379a59e9348bd2d696161c456f 2800 cryptsetup_2.0.3-5.dsc
8cd02591524d81d5ee6b20e423e37d022a6182ba 97660 cryptsetup_2.0.3-5.debian.tar.xz
883b9aebc572e9bdfb84fbdf23129790a07ae3c9 164876
cryptsetup-bin-dbgsym_2.0.3-5_amd64.deb
b328661ade9a8384d3d71bd3be815fc89acbbe88 245308
cryptsetup-bin_2.0.3-5_amd64.deb
574b81a7f9d2a3ec6002e22643f814a5c72ecc8e 63368
cryptsetup-initramfs_2.0.3-5_all.deb
397792124b4a88b15b5e9b3eb7517056c972cdc3 17116
cryptsetup-run-dbgsym_2.0.3-5_amd64.deb
98cd67535ea3bf421810aec642449a77b5c5c002 179744
cryptsetup-run_2.0.3-5_amd64.deb
75bc8659c77385cdc5778fef45f743c669716f08 48476
cryptsetup-udeb_2.0.3-5_amd64.udeb
fa329f774cc87229a7701b408b079b4c537ff5c5 47600 cryptsetup_2.0.3-5_all.deb
2d94d5b67a96d346ac870e7cd01f99740872a1f5 9189
cryptsetup_2.0.3-5_amd64.buildinfo
6c9607e8ef5364ffa123dea7d51ade477e964190 62816
libcryptsetup-dev_2.0.3-5_amd64.deb
bd33e2ed44147d6cc2752c550aec97d3dc24cb4f 340020
libcryptsetup12-dbgsym_2.0.3-5_amd64.deb
24519cf41098938a8dc4c04d28629863e2af58ca 129400
libcryptsetup12-udeb_2.0.3-5_amd64.udeb
17f388f8470131b44fa01e52a55920eaea4c2379 175536
libcryptsetup12_2.0.3-5_amd64.deb
Checksums-Sha256:
694e1af3b7a406aa4f9a987b90183a97a2d79c73524d5bad2bf35a27ecb27f4d 2800
cryptsetup_2.0.3-5.dsc
59a5ab6285de95f68b0cd76cec8ba5557031ed3e472188347422f8322a94a55b 97660
cryptsetup_2.0.3-5.debian.tar.xz
d66cc10e0f27c4af6df637400b12deb593ce40bc735faaf21f5a94239b460339 164876
cryptsetup-bin-dbgsym_2.0.3-5_amd64.deb
fd1db5baf78df178417ef0b3313cb895a9d3bcfbd8e461318589a48f62d2838d 245308
cryptsetup-bin_2.0.3-5_amd64.deb
87ef528741cb56b83e122e24923d8a22a768e6df7b575f89682c7e0b956730d3 63368
cryptsetup-initramfs_2.0.3-5_all.deb
edc7ee6a3172b770089d45caaf7a3ab9aaaea7d4dc1d23713f8cccb7efd3b94a 17116
cryptsetup-run-dbgsym_2.0.3-5_amd64.deb
925000d236d6b7ef1a991a9b8aff6c8781017a7dada4a9a8ffa5a0a45949a04c 179744
cryptsetup-run_2.0.3-5_amd64.deb
9faf95cfc410125bece003287371f2ee85ef925c3d490249d33a42bbe5f36573 48476
cryptsetup-udeb_2.0.3-5_amd64.udeb
b3b538748ff7f959b1154c2503ba06044a13f0b72dc274c93d96367a2cbfe5a7 47600
cryptsetup_2.0.3-5_all.deb
9f8ad040d7bdcba80125a9d93795e63cd619dc1c43ae64300c91d5102345658a 9189
cryptsetup_2.0.3-5_amd64.buildinfo
35f72258950d25f67ead6f015631c7710d6d7f01d81574f9a9e7915b576a70d3 62816
libcryptsetup-dev_2.0.3-5_amd64.deb
461edcad67a535815fe7eea38b9f9a3d51d2b77d571ae5683038cfad39304733 340020
libcryptsetup12-dbgsym_2.0.3-5_amd64.deb
f0f02ea3f6cbb31038360f0a360a9d180d016a20972048221d75a6081acf2e62 129400
libcryptsetup12-udeb_2.0.3-5_amd64.udeb
2867ccf111edf162e0793b5daf2806593b0c63ca7a534630261d8d19bfba255d 175536
libcryptsetup12_2.0.3-5_amd64.deb
Files:
681e7da7b0264288932dfc6bdd80066e 2800 admin optional cryptsetup_2.0.3-5.dsc
fbca8d346a423cae08b4c587a5ea8bf1 97660 admin optional
cryptsetup_2.0.3-5.debian.tar.xz
383ba4ee2a2c5cf28bc1dee268b77d25 164876 debug optional
cryptsetup-bin-dbgsym_2.0.3-5_amd64.deb
5cc49debbd83d2aaee2ebcdc912d1692 245308 admin optional
cryptsetup-bin_2.0.3-5_amd64.deb
5adb7da2dfa9f0e35a66b71d2983aa33 63368 admin optional
cryptsetup-initramfs_2.0.3-5_all.deb
e7c495cb9ecdbc059da6cbbcf37efc62 17116 debug optional
cryptsetup-run-dbgsym_2.0.3-5_amd64.deb
bf5310ba0dbf624bcc36176308c3445a 179744 admin optional
cryptsetup-run_2.0.3-5_amd64.deb
471d3837cc00e147530ba111c1d1a691 48476 debian-installer optional
cryptsetup-udeb_2.0.3-5_amd64.udeb
f30b7f2530f990f16f7134afb665fdbb 47600 oldlibs optional
cryptsetup_2.0.3-5_all.deb
0d7693128545d783337e1e75be0526bd 9189 admin optional
cryptsetup_2.0.3-5_amd64.buildinfo
2734ad0b46016612d54c5fe2f4c16a63 62816 libdevel optional
libcryptsetup-dev_2.0.3-5_amd64.deb
c7256bf4df3b73d388df201aac31e384 340020 debug optional
libcryptsetup12-dbgsym_2.0.3-5_amd64.deb
8432a1f8d79778e862f1cc85160bbcc4 129400 debian-installer optional
libcryptsetup12-udeb_2.0.3-5_amd64.udeb
c1385fd7f1e471b40886f66e123d5a82 175536 libs optional
libcryptsetup12_2.0.3-5_amd64.deb
-----BEGIN PGP SIGNATURE-----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=W8So
-----END PGP SIGNATURE-----
--- End Message ---