I hit this on Ubuntu 26.04.1 right after a do-release-upgrade from
24.04. The kernel CephFS mount stopped working at boot.

Client: ceph-common 20.2.0-0ubuntu2.1, kernel 7.0.0-34-generic. Cluster:
all daemons on 20.2.4, with `auth_allowed_ciphers aes256k` and a client
key of type aes256k.

The fstab mount (`secretfile=`) fails with:

```
auth: error parsing file /etc/ceph/ceph.client.<name>.keyring: error setting 
modifier for [client.<name>] type=key val=<redacted>: Malformed input [buffer:3]
secret is not valid base64: Invalid argument.
adding ceph secret key to kernel failed: Invalid argument
couldn't append secret option: -22
```

The same key files and the same kernel mounted fine on 24.04 with ceph-
common 19.2.6-0ubuntu0.24.04.1 from noble-proposed. The last successful
mount was a few minutes before the upgrade, so I don't think the kernel
client is involved.

Bug #2166817 has a Resolute task to bring 20.2.4 to 26.04, and 20.2.4
parses aes256k keys, so that upload should resolve this one too.

Workaround I figured out until then: skip mount.ceph and load the key
into the kernel keyring directly.

```
keyctl session - sh -c 'base64 -d /etc/ceph/ceph.client.<name>.secret | keyctl 
padd ceph client.<name> @s >/dev/null && mount -i -t ceph 
<mon1>,<mon2>,<mon3>:/ /mnt/ceph -o name=<name>,key=client.<name>'
```

Run `modprobe ceph` first if the module isn't loaded yet. Otherwise
`keyctl padd` fails with "No such device", because the ceph key type
doesn't exist until libceph loads.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2166524

Title:
  ceph-common 20.2.0-0ubuntu2 generates/parses malformed aes256k CephX
  keys

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/2166524/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to