Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #59748 > unrolled thread

Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps

Back to article view | Back to linux.debian.kernel

Contents

  Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps Nicolas George <george@nsup.org> - 2017-12-25 11:00 +0100
    Processed: Re: Bug#885160: initramfs-tools-core: hooks/resume  includes ephemeral encrypted swaps "Debian Bug Tracking System" <owner@bugs.debian.org> - 2017-12-25 12:00 +0100
    Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps Ben Hutchings <ben@decadent.org.uk> - 2017-12-25 12:00 +0100
      Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps Nicolas George <george@nsup.org> - 2017-12-25 14:00 +0100
        Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps Ben Hutchings <ben@decadent.org.uk> - 2017-12-25 22:20 +0100
    Bug#885160: marked as done (initramfs-tools-core: hooks/resume  includes ephemeral encrypted swaps) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-07-19 03:00 +0200

#59748 — Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps

[Multipart message — attachments visible in raw view] — view raw

Package: initramfs-tools-core
Version: 0.130
Severity: normal

Dear Maintainer,

The script /usr/share/initramfs-tools/hooks/resume will detect the UUID the
current swap device and include it in conf/conf.d/zz-resume-auto.

I do not use suspend/resume and my swap is encrypted using an ephemeral key,
defined in /etc/crypttab as:

aimlin-tempswap /dev/mapper/aimlin-swap /dev/urandom swap,cipher=aes-cbc-essiv:sha256,size=256

It is a rather common and documented setup. Because of that, the swap device
will never have the same UUID.

That causes scripts/local-block to wait for a long time before giving up.

The problem can be fixed adding RESUME=none in
/etc/initramfs-tools/initramfs.conf, but it took me a while to find the
reason and fix it. At least some documentation or warning needs to be
included.

Regards,

-- 
  Nicolas George


-- System Information:
Debian Release: buster/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable'), (50, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages initramfs-tools-core depends on:
ii  cpio         2.12+dfsg-6
ii  klibc-utils  2.0.4-9
ii  kmod         24-1
ii  udev         236-1

Versions of packages initramfs-tools-core recommends:
ii  busybox  1:1.27.2-2

Versions of packages initramfs-tools-core suggests:
pn  bash-completion  <none>

-- Configuration Files:
/etc/initramfs-tools/initramfs.conf changed:
MODULES=most
BUSYBOX=y
KEYMAP=n
COMPRESS=gzip
DEVICE=
NFSROOT=auto


-- no debconf information

[toc] | [next] | [standalone]

#59750 — Processed: Re: Bug#885160: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps

Processing control commands:

> tag -1 moreinfo
Bug #885160 [initramfs-tools-core] initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps
Added tag(s) moreinfo.

-- 
885160: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=885160
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#59751

[Multipart message — attachments visible in raw view] — view raw

Control: tag -1 moreinfo

On Mon, 2017-12-25 at 10:13 +0100, Nicolas George wrote:
> Package: initramfs-tools-core
> Version: 0.130
> Severity: normal
> 
> Dear Maintainer,
> 
> The script /usr/share/initramfs-tools/hooks/resume will detect the UUID the
> current swap device and include it in conf/conf.d/zz-resume-auto.
> 
> I do not use suspend/resume and my swap is encrypted using an ephemeral key,
> defined in /etc/crypttab as:
> 
> aimlin-tempswap /dev/mapper/aimlin-swap /dev/urandom swap,cipher=aes-cbc-essiv:sha256,size=256
> 
> It is a rather common and documented setup. Because of that, the swap device
> will never have the same UUID.
> 
> That causes scripts/local-block to wait for a long time before giving up.
> 
> The problem can be fixed adding RESUME=none in
> /etc/initramfs-tools/initramfs.conf, but it took me a while to find the
> reason and fix it. At least some documentation or warning needs to be
> included.

You should see a message about this every time update-initramfs runs.

If you can suggest a reliable way to identify such swap partitions,
then we may be able to exclude them.

Ben.

-- 
Ben Hutchings
The world is coming to an end.	Please log off.

[toc] | [prev] | [next] | [standalone]

#59753

[Multipart message — attachments visible in raw view] — view raw

Ben Hutchings (2017-12-25):
> You should see a message about this every time update-initramfs runs.

Indeed. But I never run update-initramfs, and I suspect many people do
the same: I just let apt-get dist-upgrade run it for me, with the output
lost in many lines. I probably should read them more carefully, but who
does?

> If you can suggest a reliable way to identify such swap partitions,
> then we may be able to exclude them.

~ $ sudo update-initramfs -k $(uname -r) -u
update-initramfs: Generating /boot/initrd.img-4.13.0-1-amd64
cryptsetup: WARNING: target aimlin-tempswap has a random key, skipped
I: The initramfs will attempt to resume from /dev/dm-6
I: (UUID=8bebd9d6-f71b-4447-a523-73f550cd9023)
I: Set the RESUME variable to override this.

Apparently the test already exists in hooks/cryptroot provided by
cryptsetup.

Regards,

-- 
  Nicolas George

[toc] | [prev] | [next] | [standalone]

#59757

[Multipart message — attachments visible in raw view] — view raw

On Mon, 2017-12-25 at 12:57 +0100, Nicolas George wrote:
> Ben Hutchings (2017-12-25):
> > You should see a message about this every time update-initramfs runs.
> 
> Indeed. But I never run update-initramfs, and I suspect many people do
> the same: I just let apt-get dist-upgrade run it for me, with the output
> lost in many lines. I probably should read them more carefully, but who
> does?
> 
> > If you can suggest a reliable way to identify such swap partitions,
> > then we may be able to exclude them.
> 
> ~ $ sudo update-initramfs -k $(uname -r) -u
> update-initramfs: Generating /boot/initrd.img-4.13.0-1-amd64
> cryptsetup: WARNING: target aimlin-tempswap has a random key, skipped
> I: The initramfs will attempt to resume from /dev/dm-6
> I: (UUID=8bebd9d6-f71b-4447-a523-73f550cd9023)
> I: Set the RESUME variable to override this.
> 
> Apparently the test already exists in hooks/cryptroot provided by
> cryptsetup.

OK, then I'll see if I can replicate whatever test it's doing.

Ben.

-- 
Ben Hutchings
The world is coming to an end.	Please log off.

[toc] | [prev] | [next] | [standalone]

#61493 — Bug#885160: marked as done (initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps)

[Multipart message — attachments visible in raw view] — view raw

Your message dated Thu, 19 Jul 2018 01:50:43 +0100
with message-id <8e26cf0adcf98d0f8bc3b2cb6f5a7478a06bec78.camel@decadent.org.uk>
and subject line Re: initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps
has caused the Debian Bug report #885160,
regarding initramfs-tools-core: hooks/resume includes ephemeral encrypted swaps
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
885160: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=885160
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web