[pkg-cryptsetup-devel] Bug#768314: cryptsetup: Passphrase prompt rolls by without stopping
Kjetil Kjernsmo
kjetil at kjernsmo.net
Thu Nov 6 12:56:23 UTC 2014
Package: cryptsetup
Version: 2:1.6.6-3
Severity: normal
Dear Maintainer,
I just upgraded my Wheezy laptop with an SSD to Jessie, and making
notes to hopefully make it useful for stabilizing the next
release. The only real issue I came across is the following, but it
was pretty scary. See the crypttab below for the details about my
encrypted partitions.
> * What led up to the situation?
A dist-upgrade to Jessie was performed. There were some warnings about
LVM stuff, but that alerted me to anything that I deemed serious or
relevant. Some packages weren't cleanly installed, it stopped with
some texlive stuff that is surely not relevant, but the kernel was not
upgraded when I did the first reboot.
After reboot, I get prompted for the passphrase of the root
partition. From there, the bootup is so fast, I don't have to time to
react to anything, before I get a message that isn't very specific
about a problem with a the /home partition. After a while, it just
times out, and I enter a shell as root to find a journal that tells me
it failed.
> * What exactly did you do (or not do) that was effective (or
ineffective)?
The journal gave me some hints that the passphrase was missing, which
I kinda knew, so I just tried another reboot, and now I saw the prompt
to enter passphrase just flashing by in a split second. I enter it
anyway, even though the prompt has disappeared.
> * What was the outcome of this action?
And that worked!
> * What outcome did you expect instead?
The bootup should pause at the prompt, so that there is no doubt what
should be done.
So, basically, it works, but the UX of this is horrible and really
scary since you are afraid that you cannot recover the data in the
partition (yeah, I have backup, so I was just marginally worried :-) )
BTW, remote filesystems have been deleted from the below fstab.
I hope this is helpful.
Cheers,
Kjetil
-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-3.16-3-amd64 root=/dev/mapper/owl-root ro quiet
-- /etc/crypttab
owl-home_crypt UUID=ffe18d19-c031-42ec-a6bb-b75aa7ddd9bc none luks
sda5_crypt UUID=db58ea52-3415-4737-863b-5129cf2db308 none luks
-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/mapper/owl-root / ext4 discard,noatime,errors=remount-ro 0 1
# /boot was on /dev/sda1 during installation
UUID=b0442da3-f1e7-41ac-a324-07322b487586 /boot ext2 defaults 0 2
/dev/mapper/owl-home_crypt /home ext4 discard,noatime 0 2
/dev/mapper/owl-lvol0 /usr ext4 discard,noatime 0 1
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
-- lsmod
Module Size Used by
rpcsec_gss_krb5 34296 0
nfsv4 414796 1
dns_resolver 12641 1 nfsv4
xt_tcpudp 12527 54
ip6table_mangle 12540 0
iptable_nat 12646 1
nf_conntrack_ipv4 18455 20
nf_defrag_ipv4 12483 1 nf_conntrack_ipv4
nf_nat_ipv4 12912 1 iptable_nat
nf_nat 18241 2 nf_nat_ipv4,iptable_nat
xt_TCPMSS 12588 6
xt_LOG 17171 45
ipt_REJECT 12465 0
iptable_mangle 12536 0
xt_multiport 12518 0
xt_state 12503 0
xt_limit 12601 49
xt_conntrack 12681 19
nf_conntrack_ftp 16783 0
nf_conntrack 87432 7 nf_nat,xt_state,nf_nat_ipv4,xt_conntrack,nf_conntrack_ftp,iptable_nat,nf_conntrack_ipv4
ip6table_filter 12540 1
ip6_tables 26025 2 ip6table_filter,ip6table_mangle
iptable_filter 12536 1
ip_tables 26011 3 iptable_filter,iptable_mangle,iptable_nat
x_tables 27111 14 ip6table_filter,ip6table_mangle,ip_tables,xt_tcpudp,xt_limit,xt_state,xt_conntrack,xt_LOG,xt_multiport,iptable_filter,xt_TCPMSS,ipt_REJECT,iptable_mangle,ip6_tables
binfmt_misc 16949 1
nfsd 263053 2
auth_rpcgss 51240 2 nfsd,rpcsec_gss_krb5
oid_registry 12419 1 auth_rpcgss
nfs_acl 12511 1 nfsd
nfs 188053 2 nfsv4
lockd 83417 2 nfs,nfsd
fscache 45542 2 nfs,nfsv4
sunrpc 237445 14 nfs,nfsd,rpcsec_gss_krb5,auth_rpcgss,lockd,nfsv4,nfs_acl
iTCO_wdt 12831 0
iTCO_vendor_support 12649 1 iTCO_wdt
joydev 17063 0
tpm_infineon 16844 0
hp_wmi 13330 0
sparse_keymap 12818 1 hp_wmi
ecb 12737 1
x86_pkg_temp_thermal 12951 0
arc4 12536 2
intel_powerclamp 17159 0
intel_rapl 17356 0
uvcvideo 79005 0
coretemp 12820 0
kvm 388597 0
videobuf2_vmalloc 12816 1 uvcvideo
btusb 29721 0
videobuf2_memops 12519 1 videobuf2_vmalloc
iwldvm 135156 0
videobuf2_core 47787 1 uvcvideo
v4l2_common 12995 1 videobuf2_core
bluetooth 374429 2 btusb
psmouse 98616 0
videodev 126451 3 uvcvideo,v4l2_common,videobuf2_core
evdev 17445 14
serio_raw 12849 0
6lowpan_iphc 16588 1 bluetooth
mac80211 474202 1 iwldvm
media 18305 2 uvcvideo,videodev
pcspkr 12595 0
iwlwifi 92451 1 iwldvm
lpc_ich 20768 0
cfg80211 405538 3 iwlwifi,mac80211,iwldvm
mfd_core 12601 1 lpc_ich
rfkill 18867 3 cfg80211,hp_wmi,bluetooth
snd_hda_codec_hdmi 45118 1
wmi 17339 1 hp_wmi
snd_hda_codec_idt 48760 1
snd_hda_codec_generic 63107 1 snd_hda_codec_idt
tpm_tis 17182 0
tpm 31511 2 tpm_tis,tpm_infineon
i915 837133 3
drm_kms_helper 49210 1 i915
snd_hda_intel 26327 3
drm 249955 5 i915,drm_kms_helper
snd_hda_controller 26727 1 snd_hda_intel
snd_hda_codec 104463 5 snd_hda_codec_hdmi,snd_hda_codec_idt,snd_hda_codec_generic,snd_hda_intel,snd_hda_controller
i2c_algo_bit 12751 1 i915
snd_hwdep 13148 1 snd_hda_codec
hp_accel 25200 0
i2c_core 46012 6 drm,i915,drm_kms_helper,i2c_algo_bit,v4l2_common,videodev
lis3lv02d 17883 1 hp_accel
snd_pcm 88662 4 snd_hda_codec_hdmi,snd_hda_codec,snd_hda_intel,snd_hda_controller
input_polldev 13118 1 lis3lv02d
hp_wireless 12491 0
ac 12715 0
video 18030 1 i915
snd_timer 26614 1 snd_pcm
battery 13356 0
snd 65244 14 snd_hwdep,snd_timer,snd_hda_codec_hdmi,snd_hda_codec_idt,snd_pcm,snd_hda_codec_generic,snd_hda_codec,snd_hda_intel
soundcore 13026 2 snd,snd_hda_codec
button 12944 1 i915
shpchp 31121 0
mei_me 17941 0
mei 74977 1 mei_me
processor 28221 0
loop 26605 0
fuse 83350 1
parport_pc 26300 1
ppdev 16782 0
lp 17074 0
parport 35749 3 lp,ppdev,parport_pc
autofs4 35529 2
ext4 469572 4
crc16 12343 2 ext4,bluetooth
mbcache 17171 1 ext4
jbd2 82413 1 ext4
algif_skcipher 13008 0
af_alg 12988 1 algif_skcipher
dm_crypt 22595 2
dm_mirror 21657 0
dm_region_hash 13299 1 dm_mirror
dm_log 17539 2 dm_region_hash,dm_mirror
dm_mod 89373 17 dm_log,dm_mirror,dm_crypt
sg 29973 0
sd_mod 44356 3
crc_t10dif 12431 1 sd_mod
sr_mod 21903 0
crct10dif_generic 12581 0
cdrom 47424 1 sr_mod
crct10dif_pclmul 13387 1
crct10dif_common 12356 3 crct10dif_pclmul,crct10dif_generic,crc_t10dif
crc32_pclmul 12915 0
crc32c_intel 21809 0
ghash_clmulni_intel 12978 0
aesni_intel 151423 5
aes_x86_64 16719 1 aesni_intel
lrw 12757 1 aesni_intel
gf128mul 12970 1 lrw
glue_helper 12695 1 aesni_intel
ablk_helper 12572 1 aesni_intel
cryptd 14516 5 ghash_clmulni_intel,aesni_intel,ablk_helper
ahci 29195 2
libahci 27158 1 ahci
libata 177457 2 ahci,libahci
scsi_mod 191405 4 sg,libata,sd_mod,sr_mod
ehci_pci 12512 0
ehci_hcd 69837 1 ehci_pci
firewire_ohci 39523 0
sdhci_pci 22097 0
xhci_hcd 148942 0
sdhci 35153 1 sdhci_pci
e1000e 203664 0
mmc_core 102374 2 sdhci,sdhci_pci
ptp 17692 1 e1000e
firewire_core 56665 1 firewire_ohci
pps_core 17225 1 ptp
crc_itu_t 12347 1 firewire_core
usbcore 195340 5 btusb,uvcvideo,ehci_hcd,ehci_pci,xhci_hcd
usb_common 12440 1 usbcore
thermal 17559 0
thermal_sys 27642 5 video,intel_powerclamp,thermal,processor,x86_pkg_temp_thermal
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (501, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages cryptsetup depends on:
ii cryptsetup-bin 2:1.6.6-3
ii debconf [debconf-2.0] 1.5.53
ii dmsetup 2:1.02.90-2
ii libc6 2.19-12
Versions of packages cryptsetup recommends:
ii busybox 1:1.22.0-9
ii console-setup 1.114
ii initramfs-tools [linux-initramfs-tool] 0.116
ii kbd 1.15.5-2
Versions of packages cryptsetup suggests:
ii dosfstools 3.0.26-4
ii keyutils 1.5.9-5
ii liblocale-gettext-perl 1.05-8+b1
-- debconf information:
cryptsetup/prerm_active_mappings: true
More information about the pkg-cryptsetup-devel
mailing list