[From nobody Mon Jul 6 16:53:08 2026 Received: (at submit) by bugs.debian.org; 6 Jul 2026 15:35:01 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-13.9 required=4.0 tests=BAYES_00, BODY_INCLUDES_PACKAGE,FOURLA,FVGT_m_MULTI_ODD,HAS_PACKAGE, SPF_HELO_NONE,SPF_PASS,WORD_WITHOUT_VOWELS autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 54; hammy, 150; neutral, 439; spammy, 0. spammytokens: hammytokens:0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*Debian, 0.000-+--forky, 0.000-+--HTo:N*Bug Return-path: <vincent@vinc17.net> Received: from disset.lip.ens-lyon.fr ([140.77.12.53]:49742) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <vincent@vinc17.net>) id 1wglLY-006sJ1-2b for submit@bugs.debian.org; Mon, 06 Jul 2026 15:35:01 +0000 Received: by disset.lip.ens-lyon.fr (Postfix, from userid 1000) id 0AF5B212008E; Mon, 06 Jul 2026 17:34:57 +0200 (CEST) Date: Mon, 6 Jul 2026 17:34:57 +0200 From: Vincent Lefevre <vincent@vinc17.net> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: cryptsetup-initramfs: cryptroot-unlock non-interactive mode is buggy in case of trailing newline character Message-ID: <20260706153457.GA2700@disset.lip.ens-lyon.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit X-Reportbug-Version: 13.2.0+nmu1 X-Mailer-Info: https://www.vinc17.net/mutt/ User-Agent: Mutt/2.4.1+14 (377e0e81) vl-188789 (2026-07-04) Delivered-To: submit@bugs.debian.org Package: cryptsetup-initramfs Version: 2:2.8.6-2 Severity: normal /usr/share/doc/cryptsetup/README.Debian.gz says Or, using a local gpg-encrypted key file: gpg --decrypt ~/.luks/remote.key.gpg | ssh -TF ~/.luks/ssh.conf root@remote.system.com cryptroot-unlock but in case the piped content is a text file (usually the case), i.e. with a newline character after the passphrase, then one gets an error, e.g. Please unlock disk nvme0n1p3_crypt cryptsetup: cryptsetup failed, bad password or options? and "No key available with this passphrase." on the remote machine. I could check with "echo -n <passphrase> | ssh ..." that the passphrase is accepted (but on a machine with multiple users, one should not use "echo" with the passphrase). -- Package-specific info: -- /proc/cmdline BOOT_IMAGE=/vmlinuz-7.1.3+deb14-amd64 root=/dev/mapper/disset--vg-root ro quiet -- /etc/crypttab nvme0n1p3_crypt UUID=4421770f-6357-493c-af2a-8b19010de3b1 none luks,discard -- /etc/fstab # /etc/fstab: static file system information. # # Use 'blkid' to print the universally unique identifier for a # device; this may be used with UUID= as a more robust way to name devices # that works even if disks are added and removed. See fstab(5). # # systemd generates mount units based on this file, see systemd.mount(5). # Please run 'systemctl daemon-reload' after making changes here. # # <file system> <mount point> <type> <options> <dump> <pass> /dev/mapper/disset--vg-root / ext4 errors=remount-ro 0 1 # /boot was on /dev/nvme0n1p2 during installation UUID=0a9394c0-6d0e-422b-87e2-299911ec091a /boot ext2 defaults 0 2 # /boot/efi was on /dev/nvme0n1p1 during installation UUID=1375-93CC /boot/efi vfat umask=0077 0 1 /dev/mapper/disset--vg-swap_1 none swap sw 0 0 [...] -- lsmod Module Size Used by qrtr 57344 2 nls_ascii 12288 1 nls_cp437 16384 1 vfat 28672 1 fat 118784 1 vfat snd_sof_pci_intel_tgl 16384 0 snd_sof_pci_intel_cnl 20480 1 snd_sof_pci_intel_tgl snd_sof_intel_hda_generic 36864 2 snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl soundwire_intel 86016 1 snd_sof_intel_hda_generic snd_sof_intel_hda_sdw_bpt 20480 1 soundwire_intel snd_sof_intel_hda_common 204800 4 snd_sof_intel_hda_sdw_bpt,snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl snd_soc_hdac_hda 24576 1 snd_sof_intel_hda_common snd_sof_intel_hda_mlink 49152 4 snd_sof_intel_hda_sdw_bpt,soundwire_intel,snd_sof_intel_hda_common,snd_sof_intel_hda_generic snd_sof_intel_hda 24576 2 snd_sof_intel_hda_common,snd_sof_intel_hda_generic soundwire_cadence 53248 1 soundwire_intel snd_sof_pci 24576 3 snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl snd_sof_xtensa_dsp 16384 1 snd_sof_intel_hda_generic snd_sof 446464 6 snd_sof_intel_hda_sdw_bpt,snd_sof_pci,snd_sof_intel_hda_common,snd_sof_intel_hda_generic,snd_sof_intel_hda,snd_sof_pci_intel_cnl intel_rapl_msr 24576 0 intel_rapl_common 53248 1 intel_rapl_msr intel_uncore_frequency 12288 0 snd_sof_utils 16384 1 snd_sof intel_uncore_frequency_common 16384 1 intel_uncore_frequency snd_soc_acpi_intel_match 147456 3 snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl snd_ctl_led 24576 0 intel_ifs 40960 0 snd_soc_acpi_intel_sdca_quirks 12288 1 snd_soc_acpi_intel_match i10nm_edac 20480 0 soundwire_generic_allocation 20480 1 soundwire_intel skx_edac_common 28672 1 i10nm_edac snd_soc_sdw_utils 139264 1 snd_sof_intel_hda_generic nfit 86016 1 skx_edac_common snd_soc_acpi 16384 2 snd_soc_acpi_intel_match,snd_sof_intel_hda_generic x86_pkg_temp_thermal 16384 0 crc8 12288 1 soundwire_cadence intel_powerclamp 28672 0 snd_hda_codec_alc269 159744 1 soundwire_bus 1183744 4 soundwire_intel,snd_soc_sdw_utils,soundwire_generic_allocation,soundwire_cadence coretemp 24576 0 snd_hda_codec_realtek_lib 69632 1 snd_hda_codec_alc269 snd_soc_sdca 126976 2 snd_soc_acpi_intel_sdca_quirks,soundwire_bus snd_hda_scodec_component 20480 1 snd_hda_codec_alc269 snd_hda_codec_nvhdmi 16384 1 snd_hda_codec_generic 131072 2 snd_hda_codec_realtek_lib,snd_hda_codec_alc269 snd_soc_avs 245760 0 snd_hda_codec_hdmi 61440 1 snd_hda_codec_nvhdmi kvm_intel 442368 0 snd_soc_hda_codec 24576 1 snd_soc_avs snd_hda_intel 65536 0 snd_hda_ext_core 36864 7 snd_sof_intel_hda_sdw_bpt,snd_soc_avs,snd_soc_hda_codec,snd_sof_intel_hda_common,snd_soc_hdac_hda,snd_sof_intel_hda_mlink,snd_sof_intel_hda snd_hda_codec 229376 10 snd_hda_codec_generic,snd_soc_avs,snd_hda_codec_hdmi,snd_soc_hda_codec,snd_hda_intel,snd_hda_codec_nvhdmi,snd_hda_codec_realtek_lib,snd_soc_hdac_hda,snd_hda_codec_alc269,snd_sof_intel_hda snd_soc_core 458752 8 snd_soc_avs,snd_soc_hda_codec,soundwire_intel,snd_sof,snd_soc_sdca,snd_sof_intel_hda_common,snd_soc_sdw_utils,snd_soc_hdac_hda kvm 1531904 1 kvm_intel snd_hda_core 159744 12 snd_hda_codec_generic,snd_soc_avs,snd_hda_codec_hdmi,snd_soc_hda_codec,snd_hda_intel,snd_hda_ext_core,snd_hda_codec,snd_sof_intel_hda_common,snd_hda_codec_realtek_lib,snd_soc_hdac_hda,snd_hda_codec_alc269,snd_sof_intel_hda snd_intel_dspcfg 49152 5 snd_soc_avs,snd_hda_intel,snd_sof,snd_sof_intel_hda_common,snd_sof_intel_hda_generic snd_compress 32768 2 snd_soc_avs,snd_soc_core snd_intel_sdw_acpi 16384 2 snd_intel_dspcfg,snd_sof_intel_hda_generic snd_pcm_dmaengine 20480 1 snd_soc_core snd_hwdep 24576 1 snd_hda_codec cxl_pci 28672 0 snd_pcm 217088 14 snd_soc_avs,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,soundwire_intel,snd_sof,snd_soc_sdca,snd_sof_intel_hda_common,snd_compress,snd_sof_intel_hda_generic,snd_soc_core,snd_sof_utils,snd_hda_core,snd_pcm_dmaengine cxl_mem 12288 1 cxl_pci irqbypass 16384 1 kvm dell_wmi 16384 0 dell_pc 12288 0 cxl_acpi 28672 0 dell_wmi_sysman 57344 0 rapl 20480 0 snd_timer 53248 1 snd_pcm dell_smbios 36864 2 dell_wmi,dell_pc dell_wmi_ddv 28672 0 cxl_pmem 24576 1 cxl_acpi pmt_telemetry 16384 0 intel_cstate 20480 0 dcdbas 20480 1 dell_smbios libnvdimm 262144 2 cxl_pmem,nfit isst_if_mmio 12288 0 isst_if_mbox_pci 16384 0 battery 28672 1 dell_wmi_ddv intel_uncore 290816 0 firmware_attributes_class 12288 1 dell_wmi_sysman sparse_keymap 12288 1 dell_wmi dell_wmi_descriptor 20480 2 dell_wmi,dell_smbios pmt_discovery 24576 1 pmt_telemetry wmi_bmof 12288 0 snd 159744 15 snd_ctl_led,snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hwdep,snd_hda_intel,snd_hda_codec,snd_sof,snd_soc_sdca,snd_timer,snd_hda_codec_realtek_lib,snd_compress,snd_soc_sdw_utils,snd_hda_codec_alc269,snd_soc_core,snd_pcm dax_hmem 20480 0 iaa_crypto 57344 0 dell_smm_hwmon 32768 0 pcspkr 12288 0 mei_me 57344 0 isst_if_common 28672 2 isst_if_mmio,isst_if_mbox_pci pmt_class 20480 2 pmt_telemetry,pmt_discovery intel_sdsi 20480 0 soundcore 16384 2 snd_ctl_led,snd mei 200704 1 mei_me joydev 32768 0 sg 45056 0 evdev 32768 13 binfmt_misc 28672 1 msr 12288 0 i2c_dev 28672 0 configfs 65536 1 efi_pstore 12288 0 efivarfs 32768 1 autofs4 61440 2 ext4 1257472 2 crc16 12288 1 ext4 mbcache 20480 1 ext4 jbd2 200704 1 ext4 crc32c_cryptoapi 12288 0 dm_crypt 69632 1 dm_mod 229376 10 dm_crypt cdc_ncm 53248 0 cdc_ether 28672 1 cdc_ncm usbnet 65536 2 cdc_ncm,cdc_ether r8152 159744 0 mii 16384 2 usbnet,r8152 hid_generic 12288 0 usbhid 90112 0 hid 282624 3 usbhid,snd_soc_sdca,hid_generic nvme 69632 3 nvme_core 249856 4 nvme sr_mod 28672 0 nvme_keyring 20480 1 nvme_core cdrom 86016 1 sr_mod nvme_auth 32768 1 nvme_core nouveau 3350528 8 mxm_wmi 12288 1 nouveau drm_gpuvm 57344 1 nouveau gpu_sched 69632 1 nouveau drm_ttm_helper 20480 2 nouveau ttm 159744 2 drm_ttm_helper,nouveau drm_exec 12288 2 drm_gpuvm,nouveau i2c_algo_bit 16384 1 nouveau drm_display_helper 311296 1 nouveau cec 81920 1 drm_display_helper rc_core 81920 1 cec drm_client_lib 16384 1 nouveau drm_kms_helper 266240 4 drm_display_helper,drm_ttm_helper,drm_client_lib,nouveau ahci 53248 0 libahci 61440 1 ahci xhci_pci 24576 0 drm 925696 17 gpu_sched,drm_kms_helper,drm_exec,drm_gpuvm,drm_display_helper,drm_ttm_helper,drm_client_lib,ttm,nouveau iTCO_wdt 16384 0 xhci_hcd 425984 1 xhci_pci libata 495616 2 libahci,ahci intel_pmc_bxt 16384 1 iTCO_wdt idxd 167936 1 iaa_crypto aesni_intel 102400 1 rtsx_pci_sdmmc 40960 0 watchdog 53248 1 iTCO_wdt video 81920 2 dell_wmi,nouveau atlantic 348160 0 usbcore 442368 7 xhci_hcd,usbnet,usbhid,cdc_ncm,xhci_pci,cdc_ether,r8152 mmc_core 290816 1 rtsx_pci_sdmmc scsi_mod 339968 3 libata,sg,sr_mod gf128mul 12288 1 aesni_intel intel_vsec 28672 1 pmt_telemetry idxd_bus 16384 2 idxd,iaa_crypto i2c_i801 32768 0 e1000e 389120 0 wmi 36864 10 dell_wmi_sysman,video,dell_wmi_ddv,dell_wmi,wmi_bmof,dell_smm_hwmon,dell_smbios,dell_wmi_descriptor,mxm_wmi,nouveau pinctrl_alderlake 32768 0 macsec 73728 1 atlantic vmd 28672 0 rtsx_pci 151552 1 rtsx_pci_sdmmc button 28672 1 nouveau usb_common 20480 2 xhci_hcd,usbcore scsi_common 16384 4 scsi_mod,libata,sg,sr_mod i2c_smbus 20480 1 i2c_i801 -- System Information: Debian Release: forky/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 7.1.3+deb14-amd64 (SMP w/16 CPU threads; PREEMPT) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages cryptsetup-initramfs depends on: ii busybox 1:1.38.0-1 ii cryptsetup 2:2.8.6-2 ii debconf [debconf-2.0] 1.5.92 ii initramfs-tools [linux-initramfs-tool] 0.151 Versions of packages cryptsetup-initramfs recommends: ii console-setup 1.248 ii kbd 2.9.0-1 cryptsetup-initramfs suggests no packages. -- debconf information: cryptsetup-initramfs/prerm_active_mappings: true -- Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon) ]