Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #268002 > unrolled thread
| Started by | Max Nikulin <manikulin@gmail.com> |
|---|---|
| First post | 2024-03-03 15:30 +0100 |
| Last post | 2024-03-05 16:10 +0100 |
| Articles | 2 — 1 participant |
Back to article view | Back to linux.debian.user
This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by
below is the oldest one visible, not the original post.
Re: Encrypted home and pam_mount Max Nikulin <manikulin@gmail.com> - 2024-03-03 15:30 +0100
Re: Encrypted home and pam_mount Max Nikulin <manikulin@gmail.com> - 2024-03-05 16:10 +0100
| From | Max Nikulin <manikulin@gmail.com> |
|---|---|
| Date | 2024-03-03 15:30 +0100 |
| Subject | Re: Encrypted home and pam_mount |
| Message-ID | <IdV0K-e9F8-3@gated-at.bofh.it> |
On 03/03/2024 02:46, Andrey Dogadkin wrote:
> Automounting works fine, but I'm having trouble with auto-unmounting
> when I log out. The partition stays mounted and I can see "target is
> busy" errors from umount in the journal.
It is an issue with ecryptfs and fscrypt as well.
https://github.com/systemd/systemd/issues/8598#issuecomment-376845082
"systemd-user doesn't properly close its PAM session"
systemd-logind default settings have UserStopDelaySec=10 so some
processes are still running after the session is finished.
Depending on desktop environment or window manager you may try
systemctl --user start exit.target
during logout if the user has no other sessions (SSH, VT, etc.)
I have not tried systemd-homed
https://systemd.io/HOME_DIRECTORY/
[toc] | [next] | [standalone]
| From | Max Nikulin <manikulin@gmail.com> |
|---|---|
| Date | 2024-03-05 16:10 +0100 |
| Message-ID | <IeEAy-eBCx-7@gated-at.bofh.it> |
| In reply to | #268002 |
On 05/03/2024 03:37, Andrey Dogadkin wrote: > On Sun, 2024-03-03 at 21:27 +0700, Max Nikulin wrote: >> >> https://github.com/systemd/systemd/issues/8598#issuecomment-376845082 >> "systemd-user doesn't properly close its PAM session" > > I saw that issue and it didn't strike me as related to my case, > pam_mount works fine as long as I allow it to shoot everything down. It may be tricky to properly finish all user processes before closing PAM session. Examples what may go wrong: - pam-sd (systemd) dropped privileges and unable to perform umount - user@.service has not finished yet, so some processes from the systemd user service have files open - The process that should close PAM session is killed by systemd when user@.service is stopped. Should not happen with defauld systemd-logind settings in Debian. > The thing is, even if I set absurdly big wait delay in pam_mount's > logout statement, I can still observe pulseaudio and dbus-daemon > running throughout the whole delay period. Systemd makes no attempt to > stop them before or while pam_mount is running, that's why it seems > like an ordering problem rather than just things being late. I think, systemd-logind should initiate termination of systemd user session when UserStopDelaySec is elapsed after all processes that belong to current PAM session are finished. It may include the process that is waiting before locking (closing) the encrypted device. Sounds like a kind of deadlock. If pam_mount allows it, I would try to not unmount the device in pam_close and instead ask user@.service to do it.
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.user
csiph-web