Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #66084 > unrolled thread
| Started by | Luc Maisonobe <luc@apache.org> |
|---|---|
| First post | 2020-01-14 23:20 +0100 |
| Last post | 2020-01-16 09:30 +0100 |
| Articles | 4 — 4 participants |
Back to article view | Back to linux.debian.kernel
Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl Luc Maisonobe <luc@apache.org> - 2020-01-14 23:20 +0100
Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl Luc Maisonobe <luc@spaceroots.org> - 2020-01-15 09:40 +0100
Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl Salvatore Bonaccorso <carnil@debian.org> - 2020-01-15 21:30 +0100
Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl luc <luc@spaceroots.org> - 2020-01-16 09:30 +0100
| From | Luc Maisonobe <luc@apache.org> |
|---|---|
| Date | 2020-01-14 23:20 +0100 |
| Subject | Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl |
| Message-ID | <zoCHv-2Pr-3@gated-at.bofh.it> |
Package: src:linux
Version: 5.4.8-1
Severity: normal
Dear Maintainer,
* What led up to the situation?
Upgrading kernel from 5.3.0 to 5.4.0
* What exactly did you do (or not do) that was effective (or
ineffective)?
Booting on the new kernel always fail with an error message stating
I entered the wrong passphrase. Selecting kernel 5.3.0 on grub works
with the same passphrase. I am sure I did not mixed passphrases, as
I tried tens of times with each kernel, result was 100% failure with
5.4.0, 100% success with 5.3.0.
I also checked if there was not a problem with keyboard layout, typing
the passphrase as if the keyboard was configured in English QWERTY (my
keyboard is a French one with AZERTY layout). It also failed 100% of time
when selecting kernel 5.4.0.
I regenerated several time the initramfs using update-initramfs -k all -u,
this didn't change anything: kernel 5.4.0 fails to decrypt, kernel 5.3.0
succeeded.
On another laptop with a comparable setting EXCEPT that the key is stored
in a file, the boot completes in 5.4.0. So only the combination decrypt_keyctl
and kernel 5.4.0 fails.
-- Package-specific info:
** Kernel log: boot messages should be attached
** Model information
sys_vendor: Dell Inc.
product_name: XPS L521X
product_version: A13
chassis_vendor: Dell Inc.
chassis_version: A13
bios_vendor: Dell Inc.
bios_version: A13
board_vendor: Dell Inc.
board_name: 063M0K
board_version: A00
** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation 3rd Gen Core processor DRAM Controller [8086:0154] (rev 09)
Subsystem: Dell 3rd Gen Core processor DRAM Controller [1028:054e]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ >SERR- <PERR- INTx-
Latency: 0
Capabilities: <access denied>
Kernel driver in use: ivb_uncore
00:01.0 PCI bridge [0604]: Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor PCI Express Root Port [8086:0151] (rev 09) (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 26
Bus: primary=00, secondary=01, subordinate=06, sec-latency=0
I/O behind bridge: 00003000-00003fff [size=4K]
Memory behind bridge: d0000000-d0ffffff [size=16M]
Prefetchable memory behind bridge: 00000000a0000000-00000000bfffffff [size=512M]
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:02.0 VGA compatible controller [0300]: Intel Corporation 3rd Gen Core processor Graphics Controller [8086:0166] (rev 09) (prog-if 00 [VGA controller])
Subsystem: Dell 3rd Gen Core processor Graphics Controller [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 32
Region 0: Memory at d1000000 (64-bit, non-prefetchable) [size=4M]
Region 2: Memory at c0000000 (64-bit, prefetchable) [size=256M]
Region 4: I/O ports at 4000 [size=64]
[virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
Capabilities: <access denied>
Kernel driver in use: i915
00:14.0 USB controller [0c03]: Intel Corporation 7 Series/C210 Series Chipset Family USB xHCI Host Controller [8086:1e31] (rev 04) (prog-if 30 [XHCI])
Subsystem: Dell 7 Series/C210 Series Chipset Family USB xHCI Host Controller [1028:054e]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 36
Region 0: Memory at d1700000 (64-bit, non-prefetchable) [size=64K]
Capabilities: <access denied>
Kernel driver in use: xhci_hcd
00:16.0 Communication controller [0780]: Intel Corporation 7 Series/C216 Chipset Family MEI Controller #1 [8086:1e3a] (rev 04)
Subsystem: Dell 7 Series/C216 Chipset Family MEI Controller [1028:054e]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 34
Region 0: Memory at d1714000 (64-bit, non-prefetchable) [size=16]
Capabilities: <access denied>
Kernel driver in use: mei_me
00:1a.0 USB controller [0c03]: Intel Corporation 7 Series/C216 Chipset Family USB Enhanced Host Controller #2 [8086:1e2d] (rev 04) (prog-if 20 [EHCI])
Subsystem: Dell 7 Series/C216 Chipset Family USB Enhanced Host Controller [1028:054e]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 16
Region 0: Memory at d1719000 (32-bit, non-prefetchable) [size=1K]
Capabilities: <access denied>
Kernel driver in use: ehci-pci
00:1b.0 Audio device [0403]: Intel Corporation 7 Series/C216 Chipset Family High Definition Audio Controller [8086:1e20] (rev 04)
Subsystem: Dell 7 Series/C216 Chipset Family High Definition Audio Controller [1028:054e]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 37
Region 0: Memory at d1710000 (64-bit, non-prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: snd_hda_intel
00:1c.0 PCI bridge [0604]: Intel Corporation 7 Series/C216 Chipset Family PCI Express Root Port 1 [8086:1e10] (rev c4) (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 27
Bus: primary=00, secondary=07, subordinate=07, sec-latency=0
I/O behind bridge: 00002000-00002fff [size=4K]
Memory behind bridge: None
Prefetchable memory behind bridge: 00000000d1400000-00000000d14fffff [size=1M]
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:1c.2 PCI bridge [0604]: Intel Corporation 7 Series/C210 Series Chipset Family PCI Express Root Port 3 [8086:1e14] (rev c4) (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin C routed to IRQ 28
Bus: primary=00, secondary=08, subordinate=08, sec-latency=0
I/O behind bridge: None
Memory behind bridge: d1600000-d16fffff [size=1M]
Prefetchable memory behind bridge: None
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:1c.3 PCI bridge [0604]: Intel Corporation 7 Series/C216 Chipset Family PCI Express Root Port 4 [8086:1e16] (rev c4) (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin D routed to IRQ 29
Bus: primary=00, secondary=09, subordinate=09, sec-latency=0
I/O behind bridge: None
Memory behind bridge: d1500000-d15fffff [size=1M]
Prefetchable memory behind bridge: None
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport
00:1d.0 USB controller [0c03]: Intel Corporation 7 Series/C216 Chipset Family USB Enhanced Host Controller #1 [8086:1e26] (rev 04) (prog-if 20 [EHCI])
Subsystem: Dell 7 Series/C216 Chipset Family USB Enhanced Host Controller [1028:054e]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 23
Region 0: Memory at d1718000 (32-bit, non-prefetchable) [size=1K]
Capabilities: <access denied>
Kernel driver in use: ehci-pci
00:1f.0 ISA bridge [0601]: Intel Corporation HM77 Express Chipset LPC Controller [8086:1e57] (rev 04)
Subsystem: Dell HM77 Express Chipset LPC Controller [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Capabilities: <access denied>
Kernel driver in use: lpc_ich
00:1f.2 RAID bus controller [0104]: Intel Corporation 82801 Mobile SATA Controller [RAID mode] [8086:282a] (rev 04)
Subsystem: Dell 82801 Mobile SATA Controller [RAID mode] [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin B routed to IRQ 30
Region 0: I/O ports at 4088 [size=8]
Region 1: I/O ports at 4094 [size=4]
Region 2: I/O ports at 4080 [size=8]
Region 3: I/O ports at 4090 [size=4]
Region 4: I/O ports at 4060 [size=32]
Region 5: Memory at d1717000 (32-bit, non-prefetchable) [size=2K]
Capabilities: <access denied>
Kernel driver in use: ahci
00:1f.3 SMBus [0c05]: Intel Corporation 7 Series/C216 Chipset Family SMBus Controller [8086:1e22] (rev 04)
Subsystem: Dell 7 Series/C216 Chipset Family SMBus Controller [1028:054e]
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Interrupt: pin C routed to IRQ 19
Region 0: Memory at d1715000 (64-bit, non-prefetchable) [size=256]
Region 4: I/O ports at 4040 [size=32]
Kernel driver in use: i801_smbus
01:00.0 3D controller [0302]: NVIDIA Corporation GF117M [GeForce 610M/710M/810M/820M / GT 620M/625M/630M/720M] [10de:1140] (rev a1)
Subsystem: Dell GeForce GT 630M [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 31
Region 0: Memory at d0000000 (32-bit, non-prefetchable) [size=16M]
Region 1: Memory at a0000000 (64-bit, prefetchable) [size=256M]
Region 3: Memory at b0000000 (64-bit, prefetchable) [size=32M]
Region 5: I/O ports at 3000 [size=128]
Expansion ROM at b2000000 [disabled] [size=512K]
Capabilities: <access denied>
Kernel driver in use: nouveau
07:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev 07)
Subsystem: Dell RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 16
Region 0: I/O ports at 2000 [size=256]
Region 2: Memory at d1404000 (64-bit, prefetchable) [size=4K]
Region 4: Memory at d1400000 (64-bit, prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: r8169
08:00.0 Network controller [0280]: Qualcomm Atheros AR9462 Wireless Network Adapter [168c:0034] (rev 01)
Subsystem: Dell AR9462 Wireless Network Adapter [1028:020a]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 18
Region 0: Memory at d1600000 (64-bit, non-prefetchable) [size=512K]
Expansion ROM at d1680000 [disabled] [size=64K]
Capabilities: <access denied>
Kernel driver in use: ath9k
09:00.0 Unassigned class [ff00]: Realtek Semiconductor Co., Ltd. RTS5209 PCI Express Card Reader [10ec:5209] (rev 01)
Subsystem: Dell RTS5209 PCI Express Card Reader [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 33
Region 0: Memory at d1501000 (32-bit, non-prefetchable) [size=4K]
Capabilities: <access denied>
Kernel driver in use: rtsx_pci
09:00.1 SD Host controller [0805]: Realtek Semiconductor Co., Ltd. RTS5209 PCI Express Card Reader [10ec:5209] (rev 01)
Subsystem: Dell RTS5209 PCI Express Card Reader [1028:054e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin B routed to IRQ 16
Region 0: Memory at d1500000 (32-bit, non-prefetchable) [size=256]
Capabilities: <access denied>
Kernel driver in use: sdhci-pci
** USB devices:
Bus 002 Device 004: ID 0cf3:e003 Qualcomm Atheros Communications
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 003: ID 0c45:646b Microdia
Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 002: ID 046d:c52f Logitech, Inc. Unifying Receiver
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.3.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-5.4.0-2-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.135
ii kmod 26+20191223-1
ii linux-base 4.6
Versions of packages linux-image-5.4.0-2-amd64 recommends:
ii apparmor 2.13.3-7
ii firmware-linux-free 3.4
Versions of packages linux-image-5.4.0-2-amd64 suggests:
pn debian-kernel-handbook <none>
ii grub-pc 2.04-5
pn linux-doc-5.4 <none>
Versions of packages linux-image-5.4.0-2-amd64 is related to:
ii firmware-amd-graphics 20190717-2
pn firmware-atheros <none>
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-intel-sound <none>
pn firmware-intelwimax <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
ii firmware-linux-nonfree 20190717-2
ii firmware-misc-nonfree 20190717-2
pn firmware-myricom <none>
pn firmware-netxen <none>
pn firmware-qlogic <none>
ii firmware-realtek 20190717-2
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>
-- no debconf information
[toc] | [next] | [standalone]
| From | Luc Maisonobe <luc@spaceroots.org> |
|---|---|
| Date | 2020-01-15 09:40 +0100 |
| Subject | Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl |
| Message-ID | <zoMnw-fl-15@gated-at.bofh.it> |
| In reply to | #66084 |
Here are some additional informations about the problem. I rechecked it was not a keyboard layout problem by setting up an additional luks key, a very short one that used only keys that were at the same position in both qwerty and azerty. It does not work, so it's definitely not a keyboard problem. The error I get on boot is as follows: Caching passphrase for sdb1_crypt:*********************** [ 15.212421] device-mapper: table: 253:0: crypt: Error allocating crypto tfm device-mapper: reload ioctl on failed: No such file or directory cryptsetup: ERROR: sdb1_crypt: cryptsetup failed, bad password or options? Caching passphrase for sdb1_crypt: I tried to use a key file instead of a key typed by user just like I did on the other laptop. I do not want to use this method for this specific machine for security reasons (it should not be abel to boot unattended), but tried it temporarily. I regenerated the initramfs after changing the /etc/crypttab file, but it didn't work either. When generating initramfs, I got the following warning, so it may explain why it didn't work. cryptsetup: WARNING: Skipping root target sdb1_crypt: uses a key file In this case (booting with a key file), the error was different: Volume group "vg-ssd" not found Cannot process volume group vg-ssd Volume group "vg-hdd" not found Cannot process volume group vg-hdd Volume group "vg-hdd" not found Cannot process volume group vg-hdd Volume group "vg-hdd" not found ... Cannot process volume group vg-hdd Volume group "vg-hdd" not found Cannot process volume group vg-hdd mdadm: error opening /dev/md?*: No such file or directory Cannot process volume group vg-hdd Volume group "vg-hdd" not found then the boot process drops to initramfs shell. Exploring the filesystem at this stage, I didn't find the key file. best regards, Luc
[toc] | [prev] | [next] | [standalone]
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2020-01-15 21:30 +0100 |
| Subject | Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl |
| Message-ID | <zoXsC-6PP-15@gated-at.bofh.it> |
| In reply to | #66090 |
Hi Luc, On Wed, Jan 15, 2020 at 09:22:05AM +0100, Luc Maisonobe wrote: > Here are some additional informations about the problem. > > I rechecked it was not a keyboard layout problem by setting up > an additional luks key, a very short one that used only keys that > were at the same position in both qwerty and azerty. It does > not work, so it's definitely not a keyboard problem. > > The error I get on boot is as follows: > > Caching passphrase for sdb1_crypt:*********************** > [ 15.212421] device-mapper: table: 253:0: crypt: Error allocating > crypto tfm > device-mapper: reload ioctl on failed: No such file or directory > cryptsetup: ERROR: sdb1_crypt: cryptsetup failed, bad password or options? > > Caching passphrase for sdb1_crypt: > > I tried to use a key file instead of a key typed by user just > like I did on the other laptop. I do not want to use this method > for this specific machine for security reasons (it should not be > abel to boot unattended), but tried it temporarily. I regenerated > the initramfs after changing the /etc/crypttab file, but it didn't > work either. When generating initramfs, I got the following warning, > so it may explain why it didn't work. > > cryptsetup: WARNING: Skipping root target sdb1_crypt: uses a key file > > In this case (booting with a key file), the error was different: > > Volume group "vg-ssd" not found > Cannot process volume group vg-ssd > Volume group "vg-hdd" not found > Cannot process volume group vg-hdd > Volume group "vg-hdd" not found > Cannot process volume group vg-hdd > Volume group "vg-hdd" not found > ... > Cannot process volume group vg-hdd > Volume group "vg-hdd" not found > Cannot process volume group vg-hdd > mdadm: error opening /dev/md?*: No such file or directory > Cannot process volume group vg-hdd > Volume group "vg-hdd" not found > > then the boot process drops to initramfs shell. Exploring the filesystem > at this stage, I didn't find the key file. Your issue sounds like #948593. In case yes, we should reassign and merge it with that bug. Regards, Salvatore
[toc] | [prev] | [next] | [standalone]
| From | luc <luc@spaceroots.org> |
|---|---|
| Date | 2020-01-16 09:30 +0100 |
| Subject | Bug#948921: linux-image-5.4.0-2-amd64: decrypting root partition does not work on 5.4.0 (works on 5.3.0) with decrypt_keyctl |
| Message-ID | <zp8Hn-51H-1@gated-at.bofh.it> |
| In reply to | #66097 |
Hi Salvatore, Le 2020-01-15 21:24, Salvatore Bonaccorso a écrit : > Your issue sounds like #948593. In case yes, we should reassign and > merge it with that bug. Indeed, it is a duplicate! I added "essiv" to /etc/initramfs-tools/modules and regenerated the initramfs and everything worked flawlessly. Thanks a lot, and sorry to not have found this bug report. The fact my other laptop worked is probably due to it having been set up last year whereas the machine that had problem has been set up several years before, so probably with different default encryption. Thanks again! Luc > > Regards, > Salvatore
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.kernel
csiph-web