[pkg-cryptsetup-devel] Bug#544773: Update to cryptsetup 2:1.0.7-2 breaks booting
Paul Millar
paul.millar at desy.de
Wed Sep 2 20:39:28 UTC 2009
Package: cryptsetup
Version: 2:1.0.7-2
Severity: critical
Justification: breaks the whole system
I upgraded my laptop this morning. The following packages were upgraded:
paul at vedrfolnir:~$ grep 2009-09-02\ 10 /var/log/dpkg.log|grep upgrade
2009-09-02 10:00:13 upgrade ant-optional 1.7.1-3 1.7.1-4
2009-09-02 10:00:13 upgrade ant 1.7.1-3 1.7.1-4
2009-09-02 10:00:14 upgrade cryptsetup 2:1.0.7-1 2:1.0.7-2
2009-09-02 10:00:14 upgrade debhelper 7.3.16 7.4.0
2009-09-02 10:00:14 upgrade freeglut3 2.4.0-7 2.4.0-8
2009-09-02 10:00:15 upgrade iso-codes 3.10.2-1 3.10.3-1
2009-09-02 10:00:16 upgrade kipi-plugins 0.5.0-1 0.6.0-1
2009-09-02 10:00:53 upgrade libportaudio2 19+svn20071022-3 19+svn20071022-3+b1
2009-09-02 10:00:53 upgrade network-manager-kde 1:0.7~~svn941706-1 1:0.7~~svn941706-2
After upgrading a few packages (listed below) I discovered my laptop was unable to boot. The laptop
uses a Luks partition with LVM (this was using a standard guided partitioning option back when I was
installing Debian). The boot fails at around the same time I would normally be prompted for the
passphrase to unlock the Luks partition.
One (or more) of the upgraded packages triggered a rebuild of the initrd. Suspecting that this
might be the cause of the problem, I tried adjusting the boot process. Using grub's built-in
editor, I changed the initrd from the usual value to the backup copy (which has the filename with
".bak" appended). When booting from the backup copy of the initrd the computer booted without any
problem.
I then took the two initrd images, unpacked them and compared their contents. There was a number of
differences, but the most noticable change was that the file:
conf/conf.d/cryptroot
that was present in the backup initrd was missing in the new initrd. This file contained
cryptographic options for establishing the LVM ontop of the Luks partition. I've copied the
contents here:
target=sdb2_crypt,source=/dev/sda2,key=none,rootdev,lvm=vedrfolnir-root
target=sdb2_crypt,source=/dev/sda2,key=none,lvm=vedrfolnir-swap_1
Suspecting that the absence of this file was causing the problem, I copied the missing
conf/conf.d/cryptroot file into the new initrd's contents and repacked the initrd file. Booting off
this modified version of new initrd was successful.
Therefore, I conclude that the laptop was unable to boot due to the missing conf/conf.d/cryptroot
file in the initrd.
My suspicion is that the upgrade to cryptsetup triggered a rebuild of initrd that, most likely due
to a bug in cryptsetup, resulted in an initrd that bereft of the conf/conf.d/cryptroot file.
-- Package-specific info:
-- /proc/cmdline
root=/dev/mapper/vedrfolnir-root ro
-- /etc/crypttab
sdb2_crypt /dev/sda2 none luks
-- /etc/fstab
# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
proc /proc proc defaults 0 0
/dev/mapper/vedrfolnir-root / ext3 errors=remount-ro 0 1
/dev/sda1 /boot ext2 defaults 0 2
/dev/mapper/vedrfolnir-home /home ext3 defaults 0 2
/dev/mapper/vedrfolnir-tmp /tmp ext3 defaults 0 2
/dev/mapper/vedrfolnir-usr /usr ext3 defaults 0 2
/dev/mapper/vedrfolnir-var /var ext3 defaults 0 2
/dev/mapper/vedrfolnir-swap_1 none swap sw 0 0
-- lsmod
Module Size Used by
i915 166840 1
drm 172672 2 i915
i2c_algo_bit 5988 1 i915
ppdev 7784 0
lp 10612 0
parport 38224 2 ppdev,lp
bridge 48240 0
stp 2868 1 bridge
bnep 13792 2
sco 10996 2
rfcomm 36016 4
l2cap 21152 16 bnep,rfcomm
acpi_cpufreq 8912 0
cpufreq_conservative 7928 0
cpufreq_userspace 3652 0
cpufreq_powersave 1792 0
cpufreq_stats 4660 0
fuse 54768 1
btusb 12756 2
bluetooth 55124 9 bnep,sco,rfcomm,l2cap,btusb
nfsd 269328 9
exportfs 4656 1 nfsd
nfs 258400 0
lockd 68212 2 nfsd,nfs
fscache 41704 1 nfs
nfs_acl 3264 2 nfsd,nfs
auth_rpcgss 40912 2 nfsd,nfs
sunrpc 196936 10 nfsd,nfs,lockd,nfs_acl,auth_rpcgss
ext2 62816 1
firewire_sbp2 15424 0
loop 15980 0
snd_hda_codec_intelhdmi 13232 1
snd_hda_codec_idt 62480 1
snd_hda_intel 26680 3
snd_hda_codec 75248 3 snd_hda_codec_intelhdmi,snd_hda_codec_idt,snd_hda_intel
snd_hwdep 8152 1 snd_hda_codec
snd_pcm_oss 37200 0
snd_mixer_oss 15072 1 snd_pcm_oss
snd_pcm 78504 3 snd_hda_intel,snd_hda_codec,snd_pcm_oss
arc4 2048 2
ecb 3072 2
snd_seq_midi 6976 0
snd_rawmidi 23008 1 snd_seq_midi
dell_laptop 4056 0
dcdbas 8560 1 dell_laptop
iwlagn 83476 0
snd_seq_midi_event 7712 1 snd_seq_midi
evdev 10448 25
serio_raw 5844 0
psmouse 42172 0
snd_seq 51376 2 snd_seq_midi,snd_seq_midi_event
iwlcore 106768 1 iwlagn
snd_timer 21824 2 snd_pcm,snd_seq
snd_seq_device 7476 3 snd_seq_midi,snd_rawmidi,snd_seq
rfkill 12116 5 dell_laptop,iwlcore
mac80211 161280 2 iwlagn,iwlcore
snd 63912 18 snd_hda_codec_intelhdmi,snd_hda_codec_idt,snd_hda_intel,snd_hda_codec,snd_hwdep,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_rawmidi,snd_seq,snd_timer,snd_seq_device
cfg80211 65432 3 iwlagn,iwlcore,mac80211
i2c_i801 10464 0
soundcore 7984 1 snd
snd_page_alloc 9984 2 snd_hda_intel,snd_pcm
i2c_core 25456 4 i915,drm,i2c_algo_bit,i2c_i801
wmi 7488 0
battery 7840 0
button 6512 0
ac 3872 0
processor 40160 3 acpi_cpufreq
ext3 122848 5
jbd 48152 1 ext3
mbcache 8804 2 ext2,ext3
sha256_generic 9440 0
aes_x86_64 8928 2
aes_generic 27840 1 aes_x86_64
cbc 3776 1
dm_crypt 12984 1
dm_mod 59384 21 dm_crypt
usbhid 37328 0
hid 41376 1 usbhid
sd_mod 33720 3
crc_t10dif 2096 1 sd_mod
uhci_hcd 22192 0
ahci 36480 2
firewire_ohci 22356 0
firewire_core 44980 2 firewire_sbp2,firewire_ohci
crc_itu_t 2720 1 firewire_core
libata 175500 1 ahci
sdhci_pci 8160 0
sdhci 17604 1 sdhci_pci
mmc_core 55472 1 sdhci
led_class 5048 2 iwlcore,sdhci
ricoh_mmc 4272 0
intel_agp 28752 1
scsi_mod 158768 3 firewire_sbp2,sd_mod,libata
ehci_hcd 33804 0
e1000e 111728 0
video 21884 1 i915
output 3472 1 video
thermal 15936 0
fan 5240 0
thermal_sys 16448 4 processor,video,thermal,fan
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (x86_64)
Kernel: Linux 2.6.30-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages cryptsetup depends on:
ii dmsetup 2:1.02.36-2 The Linux Kernel Device Mapper use
ii libc6 2.9-26 GNU C Library: Shared libraries
ii libdevmapper1.02.1 2:1.02.36-2 The Linux Kernel Device Mapper use
ii libpopt0 1.14-4 lib for parsing cmdline parameters
ii libuuid1 2.16-3 Universally Unique ID library
cryptsetup recommends no packages.
Versions of packages cryptsetup suggests:
ii dosfstools 3.0.5-1 utilities for making and checking
ii initramfs-tools [linux-initra 0.93.4 tools for generating an initramfs
ii udev 0.141-2 /dev/ and hotplug management daemo
-- no debconf information
More information about the pkg-cryptsetup-devel
mailing list