[pkg-cryptsetup-devel] Bug#768407: cryptsetup: dm-crypt disk unlocks on older Debian, does not on current testing

clayton claytonk at gmx.com
Fri Nov 7 09:11:14 UTC 2014


Package: cryptsetup
Version: 2:1.6.6-3
Severity: important

I have an old dm-crypt partition that I have been using for long-term backups.
This is the crypttab:

backcrypt /dev/sdb2 none cipher=aes-cbc-plain,size=256,hash=ripemd160,noauto,loud

which I normally start with

cryptdisks_start backcrypt

Suddenly (or not so suddenly, I have not accessed this partition in several months)
when I try to mount the result of the above:

# mount -t ext3 /dev/mapper/backcrypt /media/backcrypt/
mount: wrong fs type, bad option, bad superblock on /dev/mapper/backcrypt,

cryptdisks_start generates no errors either in the terminal or in the log, but something is not right.
(Note that this is not a passphrase issue because I always copy&paste the passphrase from keepassx.
And I tried several times. Not finger problems.)

I just happen to have an old bootable USB of Debian that has not been updated in (many?) months.
When I boot that disk, with the same crypttab, and an older cryptsetup, the partition unlocks and mounts just fine.

Something silent and fairly destructive has changed in the default behavior of dm-crypt.
I very nearly wrote the partition off as corrupted before I thought of trying to mount it
with an old Debian installation.

I assume that something needs to change in my crypttab, but I have no idea what.

-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-3.16-3-amd64 root=/dev/mapper/x201i--vg-root ro quiet

-- /etc/crypttab
sda5_crypt UUID=cd5aa5f3-5cf8-45a2-b174-c21bc18b0c47 none luks

backcrypt /dev/sdb2 none cipher=aes-cbc-plain,size=256,hash=ripemd160,noauto,loud

-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
/dev/mapper/x201i--vg-root /               ext4    errors=remount-ro 0       1
# /boot was on /dev/sda1 during installation
UUID=efbc99f2-a47e-45e5-840f-9e2326011560 /boot           ext2    defaults        0       2
/dev/mapper/x201i--vg-home /home           ext4    defaults        0       2
/dev/mapper/x201i--vg-swap_1 none            swap    sw              0       0

/dev/x201i-vg/protected-x201i /protected ext4 defaults 0 0
/dev/x201i-vg/scratch-x201i /scratch ext4 defaults 0 0

# /dev/mapper/backcrypt /media/backcrypt ext3 rw,user 0 0

-- lsmod
Module                  Size  Used by
cbc                    12696  1 
usb_storage            56215  1 
bnep                   17431  2 
bluetooth             374429  5 bnep
6lowpan_iphc           16588  1 bluetooth
tun                    26385  2 
binfmt_misc            16949  1 
pci_stub               12429  1 
vboxpci                23077  0 
vboxnetadp             25443  0 
vboxnetflt             23324  0 
vboxdrv               340067  3 vboxnetadp,vboxnetflt,vboxpci
ipt_MASQUERADE         12594  8 
xt_recent              17246  1 
xt_comment             12427  16 
xt_owner               12459  2 
iptable_nat            12646  1 
nf_nat_ipv4            12912  1 iptable_nat
ipt_REJECT             12465  4 
xt_addrtype            12557  4 
xt_mark                12453  1 
iptable_mangle         12536  1 
xt_tcpudp              12527  73 
xt_CT                  12842  22 
iptable_raw            12524  1 
xt_multiport           12518  4 
nf_conntrack_ipv4      18455  53 
nf_defrag_ipv4         12483  1 nf_conntrack_ipv4
xt_conntrack           12681  30 
ipt_ULOG               12819  0 
xt_NFLOG               12462  0 
nfnetlink_log          17201  1 xt_NFLOG
xt_LOG                 17171  8 
nf_nat_tftp            12422  0 
nf_nat_snmp_basic      16904  0 
nf_conntrack_snmp      12443  3 nf_nat_snmp_basic
nf_nat_sip             17053  0 
nf_nat_pptp            12562  0 
nf_nat_proto_gre       12517  1 nf_nat_pptp
nf_nat_irc             12454  0 
nf_nat_h323            16935  0 
nf_nat_ftp             12460  0 
nf_nat_amanda          12424  0 
ts_kmp                 12535  5 
nf_conntrack_amanda    12437  3 nf_nat_amanda
nf_nat                 18241  11 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,ipt_MASQUERADE,nf_nat_proto_gre,nf_nat_h323,nf_nat_ipv4,nf_nat_pptp,nf_nat_tftp,iptable_nat
nf_conntrack_sane      12428  2 
nf_conntrack_tftp      12433  3 nf_nat_tftp
nf_conntrack_sip       26053  3 nf_nat_sip
nf_conntrack_proto_udplite    12931  0 
nf_conntrack_proto_sctp    17268  0 
nf_conntrack_pptp      12619  3 nf_nat_pptp
nf_conntrack_proto_gre    13024  1 nf_conntrack_pptp
nf_conntrack_netlink    35433  0 
nfnetlink              12989  2 nfnetlink_log,nf_conntrack_netlink
nf_conntrack_netbios_ns    12445  2 
nf_conntrack_broadcast    12365  2 nf_conntrack_netbios_ns,nf_conntrack_snmp
nf_conntrack_irc       12427  3 nf_nat_irc
nf_conntrack_h323      58618  5 nf_nat_h323
nf_conntrack_ftp       16783  3 nf_nat_ftp
nf_conntrack           87432  30 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,xt_CT,nf_nat_snmp_basic,nf_conntrack_netbios_ns,nf_conntrack_proto_gre,ipt_MASQUERADE,nf_conntrack_proto_udplite,nf_nat,nf_nat_h323,nf_nat_ipv4,nf_nat_pptp,nf_nat_tftp,xt_conntrack,nf_conntrack_amanda,nf_conntrack_proto_sctp,nf_conntrack_netlink,nf_conntrack_broadcast,nf_conntrack_ftp,nf_conntrack_irc,nf_conntrack_sip,iptable_nat,nf_conntrack_h323,nf_conntrack_ipv4,nf_conntrack_pptp,nf_conntrack_sane,nf_conntrack_snmp,nf_conntrack_tftp
iptable_filter         12536  1 
ip_tables              26011  4 iptable_filter,iptable_mangle,iptable_nat,iptable_raw
x_tables               27111  18 xt_mark,xt_CT,xt_comment,ipt_ULOG,xt_recent,ip_tables,xt_tcpudp,ipt_MASQUERADE,xt_NFLOG,xt_owner,xt_conntrack,xt_LOG,xt_multiport,iptable_filter,ipt_REJECT,iptable_mangle,xt_addrtype,iptable_raw
i915                  837133  8 
arc4                   12536  2 
iwldvm                135156  0 
mac80211              474202  1 iwldvm
joydev                 17063  0 
intel_powerclamp       17159  0 
coretemp               12820  0 
iwlwifi                92451  1 iwldvm
kvm_intel             139077  0 
drm_kms_helper         49210  1 i915
cfg80211              405538  3 iwlwifi,mac80211,iwldvm
snd_hda_codec_hdmi     45118  1 
drm                   249955  5 i915,drm_kms_helper
snd_hda_codec_conexant    17739  1 
snd_hda_codec_generic    63107  1 snd_hda_codec_conexant
iTCO_wdt               12831  0 
iTCO_vendor_support    12649  1 iTCO_wdt
kvm                   388597  1 kvm_intel
pcspkr                 12595  0 
i2c_i801               16965  0 
tpm_tis                17182  0 
evdev                  17445  13 
psmouse                98616  0 
i2c_algo_bit           12751  1 i915
thinkpad_acpi          69119  1 
snd_hda_intel          26327  3 
shpchp                 31121  0 
snd_hda_controller     26727  1 snd_hda_intel
tpm                    31511  1 tpm_tis
nvram                  13034  1 thinkpad_acpi
serio_raw              12849  0 
intel_ips              17420  0 
i2c_core               46012  5 drm,i915,i2c_i801,drm_kms_helper,i2c_algo_bit
snd_hda_codec         104463  5 snd_hda_codec_hdmi,snd_hda_codec_conexant,snd_hda_codec_generic,snd_hda_intel,snd_hda_controller
snd_hwdep              13148  1 snd_hda_codec
lpc_ich                20768  0 
rfkill                 18867  5 cfg80211,thinkpad_acpi,bluetooth
snd_pcm                88662  4 snd_hda_codec_hdmi,snd_hda_codec,snd_hda_intel,snd_hda_controller
mfd_core               12601  1 lpc_ich
wmi                    17339  0 
ac                     12715  0 
battery                13356  0 
snd_timer              26614  1 snd_pcm
snd                    65244  15 snd_hwdep,snd_timer,snd_hda_codec_hdmi,snd_hda_codec_conexant,snd_pcm,snd_hda_codec_generic,snd_hda_codec,snd_hda_intel,thinkpad_acpi
soundcore              13026  2 snd,snd_hda_codec
mei_me                 17941  0 
mei                    74977  1 mei_me
video                  18030  1 i915
button                 12944  1 i915
acpi_cpufreq           17218  1 
processor              28221  1 acpi_cpufreq
fuse                   83350  3 
autofs4                35529  2 
ext4                  469572  5 
crc16                  12343  2 ext4,bluetooth
mbcache                17171  1 ext4
jbd2                   82413  1 ext4
xts                    12679  1 
gf128mul               12970  1 xts
algif_skcipher         13008  0 
af_alg                 12988  1 algif_skcipher
dm_crypt               22595  2 
dm_mod                 89373  21 dm_crypt
sg                     29973  0 
sd_mod                 44356  5 
crc_t10dif             12431  1 sd_mod
crct10dif_generic      12581  1 
crct10dif_common       12356  2 crct10dif_generic,crc_t10dif
ehci_pci               12512  0 
ahci                   29195  2 
ehci_hcd               69837  1 ehci_pci
libahci                27158  1 ahci
crc32c_intel           21809  0 
libata                177457  2 ahci,libahci
scsi_mod              191405  4 sg,usb_storage,libata,sd_mod
usbcore               195340  3 usb_storage,ehci_hcd,ehci_pci
usb_common             12440  1 usbcore
e1000e                203664  0 
ptp                    17692  1 e1000e
thermal                17559  0 
pps_core               17225  1 ptp
thermal_sys            27642  4 video,intel_powerclamp,thermal,processor


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (800, 'testing'), (700, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cryptsetup depends on:
ii  cryptsetup-bin         2:1.6.6-3
ii  debconf [debconf-2.0]  1.5.53
ii  dmsetup                2:1.02.90-2
ii  libc6                  2.19-12

Versions of packages cryptsetup recommends:
ii  busybox                                 1:1.22.0-9
ii  console-setup                           1.114
ii  initramfs-tools [linux-initramfs-tool]  0.116
ii  kbd                                     1.15.5-2

Versions of packages cryptsetup suggests:
ii  dosfstools              3.0.26-4
pn  keyutils                <none>
ii  liblocale-gettext-perl  1.05-8+b1

-- debconf information:
  cryptsetup/prerm_active_mappings: true



More information about the pkg-cryptsetup-devel mailing list